{"report_id":"c6dd7a93-e263-4488-9810-5807d9624f07","version":6,"status":"done","tags":[],"date":"2026-01-22T11:35:25Z","url":{"schema":"http","addr":"www.theturngroup.com","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"172.67.69.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"title":"Professional Custom Web Design, AI Integrations, SEO Optimization, Web App Development, Hosting, Branding, and Digital Marketing Experts","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T19:49:22.306397Z","times_seen":17748684,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.theturngroup.com","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"172.67.69.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-26T11:35:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-01-19T04:19:50.026347Z","alert_count":0,"request_count":14,"received_data":1030845,"sent_data":6722,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-01-18T22:29:48.020431Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2026-01-19T07:33:12.647458Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":719,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2026-01-19T04:29:05.488591Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.theturngroup.com","ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-10-14","domain_rank":0,"first_seen":"2025-11-24T18:13:49.824016Z","last_seen":"2025-12-20T03:33:31.283905Z","alert_count":104,"request_count":104,"received_data":6433040,"sent_data":63136,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":8,"received_data":335832,"sent_data":4444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-01-19T06:33:28.234511Z","alert_count":0,"request_count":5,"received_data":21041,"sent_data":3046,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":2,"received_data":783044,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":101450,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_easyblog/scripts/vendors/ui/position.min.js","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a0ac07dba6cbede575d3f21d89281c1","sha1":"456fcda6e4bf62d8e7f896f4f824eb0847bbaf58","sha256":"400c7cd037af12e5b5e6bd3327b3794f57976dcaf229cdd7a3f3492db4811edc","sha512":"791d238b664684e1601e030ccef3a3d76f02b4111f67cceb9fae839976c5be2378aadc67c4e35baeaf9c8eaf3cfd7935aebe3a8c3e3791300d29b8373c7881ea","ssdeep":"192:q3bXssOt7qrvlxxDfiGaJhxlM2W/kEXczie:q3bXssOoa19lMYEszie","tlshash":"98d1b5b8a3167c01c2b7f2069487471cb1359124bb2fe14af26dcee978a799821f3d95","size":6177,"data":"","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.273537Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/sandbox%20eval%20code","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"62fc30ab897a26f4a3b74a44f959114c","sha1":"a189d720dc8667e76de4fc472ebb5ea1419a45e3","sha256":"365f752c4412443002ea5c2f7f7a32bc5301d43f70f35623b9e7ea67dc94f162","sha512":"dfe0d8d6d25cd0a8f82c64203db42740d303f9e4e9e775351e5a60f6f5df4a38c3355f1a63c03f43bad6a0537a42afd819c80b8ca13c1f72a5774773fc7207eb","ssdeep":"1536:EnC9o5ri/D+iQNPcDYbeyzB8SP1gaGwp78RtKnBM/0H7s:EC9o5u/Cazyz9PuG5B3HQ","tlshash":"32a34ada7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","size":98905,"data":"","first_seen":"2026-01-22T09:43:26.2827Z","last_seen":"2026-01-26T07:43:48.704058Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/core.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fb4f4ee5adaf0a36ff6dd4c2466374b","sha1":"37ffe4186289eba9c5df81bea44080aff77b9684","sha256":"9c0b2e2bdefaaa94497515528c1b59b76d65533c4c7bb2c6896727d2511fa7a4","sha512":"c697858691f538bc8be3cde01df46f5fefd2a034e3c460b67b7da1f79e077e1d97a9d73343959c49e3a6d2b8af1e1de828ce3fb10e934cbd45ec7eac6352b5ed","ssdeep":"192:d6RgsS1FvAD4qUyQZWKfH/rQVmDJJRznWy8X0Gb9DGYF5tF1hZ8ZaZs:d66sS1JAD4ok/rQVmDDRznWy8EGbFFT6","tlshash":"d0f1d9e72865433186e8d3ed94805718b437a311b83f4420e458bdfb7f55d02e96fda8","size":7662,"data":"","first_seen":"2024-08-26T03:12:55Z","last_seen":"2026-08-06T16:48:52.406042Z","times_seen":884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/carousel.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0592f2fc779600529ffd38b584627ff8","sha1":"e2e95415984dc283d8df341e5c735dc72d23ec33","sha256":"30c88a7a41bd2aff406cb4ad3bd95c3681741e54b89e34376eed85a2f42dd056","sha512":"421b4f4149af10d9f496c1845d941394c93af9b78ca94008f3fb5b5972b2c730bc81f65747dc84d408e338c35acd17065f458e8c658b48e3e59a23f79da54203","ssdeep":"96:FxkFmrUriggt9bHDqsiQoAcjb3n5/g27xHJVR++9Te5vT6QTFLzHi5XYQdx5:FxkFWUreHvqPQoAI35/NHJVRN9+vT7FU","tlshash":"fbc18657338a68324cd2add64136c643f7185d962606409db57e1cde2b3ec82f23abbd","size":5752,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.918411Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/mod_menu/js/menu.min.js?ed020df79f500d6768c656cda8646f5c","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"336ce0f372e6ee7655e164cf075921c0","sha1":"416d284e7b4b862d3c3ef83ed8ab0d4530f7b4cc","sha256":"7a0907f8cde675e558b8ea47128bd23f49f21938f25d140826c750f670265489","sha512":"36ea97ced14429328f28913fcf827e026ce712f75f85bd79ec01be7558691b030608adf35e8450a26bd7e2184a184ce6de025254fad0117d3d6f1aaa92d6e8e8","ssdeep":"","tlshash":"844133310a1019b35acae7eea0e2d8966737089bf4024861a435ce4f492edc112fb5df","size":2308,"data":"","first_seen":"2025-09-09T01:33:38.423153Z","last_seen":"2026-08-03T08:08:58.028874Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/components/com_sppagebuilder/assets/js/sppagebuilder.js?032af75ad5933f9f9a025db2a15c10bb","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"601dbe573d6a5a3d3bdc025d62d6cfc9","sha1":"ac12a6343b378d4e96bafa1602ec23dc8d208101","sha256":"3829ab1ab210fac19298175b96a467a1d8f2fde21160fc34b341fc4f28c8ba3d","sha512":"20d20e0d799f692327fc74064b1bdd9dfc5e2e0e54c8a826aa3c2d04a297a954abb650a4f3717085aa3523bb37de11a834495c9667add8f8957d818fd1da1bbc","ssdeep":"1536:hBIfDaQ5EQNejHWv4UgxuyYOcWKhJ0N8lc+AEnDAUFmwaLBqUUA8UusyyoTtjZnt:h6WQuHPuyYOQhJ0NkcTEDAUvaLpUA8su","tlshash":"9683d768b21534751abb62f1106f4649b2326938e50280a878bad5f61f7ccc9737bf7c","size":82249,"data":"","first_seen":"2025-02-27T18:47:39.661469Z","last_seen":"2026-08-05T22:26:55.903472Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T15:42:56.635628Z","times_seen":337638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","size":74,"data":"","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-07-27T01:40:34.400213Z","times_seen":18485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.9l_4saF0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6a937f3c3fbe055f810b3771bb52adb4","sha1":"3fc9e267c68bf9fe61061094ece6c5b55e427c31","sha256":"a14d0cf85c8cac0126953ede5c48b468192a03e5ac781836c80f87e213dd9c89","sha512":"95503a99fe3d28c1d207d8fa43aa865030db00b5e510b9045cf58adaf0159f4eb6e649743c7317d2bf627d5005df6eaf88aca8dc181fa82572f6a0c2fd4e3714","ssdeep":"1536:9gZQTNE+6WzvhFCvB0Hx6J+vXlKAwTwH7nDPWnYlkChX8qg4JklHYD8P:9gKTNETWzvhFCp0UcDOnA5sFikRYD8P","tlshash":"71d3f8e83996f5626bf312b700af1817733c192b280c4960a211fdddb5b845ea17bf9d","size":138434,"data":"","first_seen":"2026-01-15T11:15:36.914645Z","last_seen":"2026-01-28T07:34:27.663347Z","times_seen":945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-08-06T19:18:45.567662Z","times_seen":49298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/legacy/js/jquery-noconflict.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"504da43c893d66e1f5181c5050a0a83b","sha1":"647005fc12b79b3ca2bb30c059899d5994e3e34d","sha256":"b2780d4cc319da7a668fa616e02c74f77835975dd95c989340dc2538709ae805","sha512":"1e60797310be57ceaee2987f61d12a6881daaf8e9a9ba6d2cfad9caad94709b5741069ab5b55a33f4f0a140d4a51faf24610f9696fac83d30ed7d7768f0a92ae","ssdeep":"","tlshash":"0b800008f88280280ab0200ea0300b2ab002238e2030c08800ac0800000828c2a02028","size":27,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T16:48:52.408686Z","times_seen":3603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/toast.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01efe94b21525a5b3cbf62e8cc861d7","sha1":"b1aafdd16f8d471170f25906036e9286d86beb03","sha256":"2bf8fec6e771899029d29689cdd62530a75efc58cfabdc1f0358b1c7ae994787","sha512":"948a39f5a206f979f88d2aafe5ee9d6d9a7e7dccfa0f97a31fe669cbd087f4d087d5da0eb3f45b766e9342e1d9250e9ebd204e15f33e3da1c8a3e7f7131f2d34","ssdeep":"","tlshash":"25510145738e643756ea85bf9137828bf5344594a44900ac787998cdab7ec8373b33f4","size":2789,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.883806Z","times_seen":500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/tab.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb5a3d21c66e8c8456f2383cd16b3401","sha1":"c719398dfe82be594294a1c202f94705928e8d92","sha256":"8e6efaf5415f1d6ec65dc8a3a390cd755141fde2a83ad39f5020bf0b849c071d","sha512":"8b0b20fc7c8d588724ac11f5d67a2343ff5fa998eb48be4eaa99c7e1a3e0d332a25329b232e088db7a203ca457eb9177583745321ba710fb6a4da45d068b24f0","ssdeep":"96:1GIC9kHFFG/ojUeMfULBezGSSsQqdCmThokMS+nc6s+:1GICqHFFG/oZM6BLSSLqd/tl+nc6s+","tlshash":"0ca16577319426774cda2cea4032aac7f51968a8a5834524b52dccdf733ecc23477ab9","size":4965,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.851781Z","times_seen":508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_easyblog/scripts/site/vendors/swiper.min.js?66fd62324691664427d4b060a3095b9f=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b27445c13648a4664dd0095ca9878dd","sha1":"d7a4924966e5123d7011330ee321faaefa9c364a","sha256":"4cf097057ead8b1537b380ce43b9042b3503c7d3994bab3fdbe88299474511ac","sha512":"6978bbe138d0b98779e6b43ed94bd4d77f6ee6d50151213aa03aa7d5aaa972106d9d4823c89a859ef77758f84cacbafc830c550cf1f3accd23e4b070f90ea915","ssdeep":"3072:jCdXvbh9qR53bzPpy3yIs4qUL4ne54m4N8/t1pMlq:uXvPqR53bzSs4qUL4ne54m4N8rpMw","tlshash":"ffd30b49739162a6d2e72256424ec10162b65852b50ed1b471b3cc1b7ebce280bfffbd","size":137654,"data":"","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.268081Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-04T17:33:10.203066Z","times_seen":16397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-08-06T19:18:45.567662Z","times_seen":49298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-08-06T19:18:45.567662Z","times_seen":49298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/raty.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cae8863e335d3fbf64703587cf4b5cf","sha1":"e9b8e89999ca43bc093a196e11226c4a69d44fc4","sha256":"89ae3f84b5ae547adba06c8c36fa3a84a7646f6f0930b4b8d7e485c942691a19","sha512":"7008d7500ab57c8ffbb18f38eec0b28800c1d8b3a875c00e67c58caa72242aeb670c238264c29ab103aaebacc970ecfaf6cc559c06c3e7baf5323b7675d801ea","ssdeep":"96:SZ41ZxQEf22HHhOgWYQPAPqbjeC3/3HLGBNVD8DVN6vN3WNkJl:Sa80LUYQd3vHLGt8sl","tlshash":"00f101d8f2c67117ada373605aab270ee233ad45a007412d383ed9d5efa8d49207697c","size":7556,"data":"","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.277768Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/tribute.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb185ef50327281e46316c1a8b9897a9","sha1":"2351131b0c71d3e432ba98ba71f3b4948d9a672a","sha256":"e643d98709046676f75aad3823be07cf066cdbd2d749060622ca2b0729eb6d8e","sha512":"d8fc9ca6b09869263bd3d80d2d7e5dcd9a43a3c8d8315feebe09a2cbd8bcb73e80123d1bbda37bdef07edc174836d8e87522e6f0b7261664ce15c944c474d015","ssdeep":"768:sCVH/eGTfFwzn8M2wswezcDrirXlqtLKCyhETwQ9iW9nWmqoqv6TfVCgX8igV56x:Hf4wlqtGYZ9oa","tlshash":"ede2d9b0368136b0ceae722ad1ef5158613325541486d0b8f03dd8c96ff9a4615bbfbe","size":31307,"data":"","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.292064Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=11648703\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.theturngroup.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__udh505wf1zc","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a22d4207012af9e0179549b0953c362a","sha1":"c0745a5593e47179bfd10855155422d9711a0a22","sha256":"442ccb1430111d71f8085e537b3f9f05b882978359e238e3779155799442b002","sha512":"322e9862eb043d930253f34cadf09b71e366f5083f680b1f853dd33d7947f2002d30a1f1235913d5044df397b0991b7fa75c5ff4419b7f855d711bc62a65a02f","ssdeep":"","tlshash":"55e0207eb50165729fe5f359e4217a81bd3467a1920534f8b49d1350811f69d4330947","size":362,"data":"","first_seen":"2026-01-22T11:35:33.112698Z","last_seen":"2026-01-22T11:35:33.112698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.BLrr1qtb.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"031f5c31bd59099e5afbcfb0d028121c","sha1":"724961efc6bc1cb4f051e09a0eaa6ece9ecee45a","sha256":"9aa52b43c449176eaf4ab495c721a4ae03f1b4175fd7ec14160ca1efb8557205","sha512":"4203325e93cfb55241bc5b423b6150a9f76e15ac3db7d91fce5d11acdeaabbe7a5012bcafd9b99731cac3db214c7c50421bac45941364e2c0e78acaf74d0b0ca","ssdeep":"192:+Zt7jz9crFCyJf60llUteY9s84NaXsjTownsosM9XXVXXcNPYIZwk1o3J:+ZtECyJS0llUt/9PK7QpM9ViP7Zw4Y","tlshash":"8e02e7bff741e470d3db55a1ad1a0003fa3a1698399d8170f62c8d24615e5c4a277feb","size":8380,"data":"","first_seen":"2026-01-22T09:43:26.435872Z","last_seen":"2026-01-28T07:34:27.586033Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-08-06T19:18:45.567662Z","times_seen":49298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/tippy.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"966f09c0bda0c5b9893f3e669bf57673","sha1":"b647fcd8f6988d6dc0000492021fe5eae9388a80","sha256":"b06b2f363cae8651f0def3fe9c97747c154dd7a1c8dfb5421650a3babc5332c0","sha512":"61fc10f32586ce849dce928cd3183e216f155952312a81841331d3f758af9aa75b791248e8911a5dfa557503b8a08cec200fee84826205c7ff3964a3355d05cb","ssdeep":"768:mCX5FlxneM+eAD5pKmib2ifQvDduwP2r+/54ORgLj23pRGdkoaFUmGuPPo:LzjOP2QRIjdo2","tlshash":"56c2e78af69170791b6751b2c06fa71ab23b216d244f8520f477e0c93c78dac52abf1d","size":28167,"data":"","first_seen":"2023-04-06T22:43:16Z","last_seen":"2026-07-28T18:47:55.286627Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.CXYql_Yf.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3c5097e0da6b30e76bd9c9f5eac505d3","sha1":"451a2a2b0116509afab72ff52ed803ef9de39c40","sha256":"a88097a59800c215f71fb94d449c241972b7612cd7e990c74dd5994181267d5c","sha512":"bd947ad887a2c99c7d870a079fb9591d2dee2becbe866f6dc851260c6b96d867578951b64d9ff3902749d938a37ffd47ee55f88be48c47cd827ae96c634c4d1e","ssdeep":"1536:xZVvOApL0+ZhRp2rNzX4y5VLpKQXGv2E3O52zkT3xJ9c7Pw:xZLLxZhrUVLpv2vS5w49cjw","tlshash":"f47309d2f291f5399bd7a8e551285003fa2639587c5cc270f32cce24219e6c6a1b7f6b","size":74971,"data":"","first_seen":"2026-01-22T09:43:26.261382Z","last_seen":"2026-01-22T15:05:12.830879Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/keepalive.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08e02523a40f3d0b1e0e3b0bd1a0f013","sha1":"9f10654c2f49ca104ca0449def6eec3f06bd19c0","sha256":"983c4e677c121da92edce183d530881200e0ce545ddca1174bdb3eedb7588619","sha512":"5c7a1fd65c18696e4b3a154638ccc0e35ad42522bcbd938c8296f489a49a4ae64cbdbd8cab6185516549218bdd674893ca06867fae9fa67b284dbac70f1f6212","ssdeep":"","tlshash":"450145130322825e84c19a93052976e2a632c753fedf70322b54dec165ef90ad58a997","size":741,"data":"","first_seen":"2023-12-30T06:58:07Z","last_seen":"2026-08-06T09:42:02.298684Z","times_seen":802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/alert.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e1aa116d66210cbdef644d94ed4c10c","sha1":"3f8a7eb4d3d0ce9d4872029811e0d9d9739cb5ff","sha256":"b5ad0cfa6f6b342f30004352f0a950e40d6edcc78a7397534aa9d8debf745eef","sha512":"28b3ad02641e8b08af9884814dd666db99068fbbddf5c9debae669749815f364fc4b50ea8ec2d2670c76934f8b96cfa64fc0273b6902f5a20e01fa49a8f1730b","ssdeep":"","tlshash":"d111500db30055b48afe449e6237b3caf0244454252a09ac70ac29efdab4ac37177eb0","size":987,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.840827Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/shared.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fd56e06f41395a58f3477c6be760699","sha1":"29bef81008420450816e05364db13fef89689e03","sha256":"6c5e6ea20da2c40d92d4f9619bb88ad88a6f7c492343159dd4a5cb339f548cf4","sha512":"5852c299451acf72b2be6e5d07e3f56dedbcf4819fb16a87c3a6dccaaa54a610df156bff0a2c931dfc3d4ca7adf0b8dff6090d7ac69ff197c3911e6843295f30","ssdeep":"192:M4UYVGAx7VS7Y/3LfUptUT4Y+t+PxjBj0pPfGPBg6xfzer/GX32/DaD4HhkxW5pi:MbGGAx7VS8AUT4Y+sPxjBj8PePBg6xfF","tlshash":"15128468716460b12fff56a0d4ead90266233839620740d0709b98fd2bbde8675e2f3d","size":9882,"data":"","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.271144Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026version=6bb83031e4f97736cbbada081b074fb6_d3a41bafbeed44fcad20ff491b0f7bfa\u0026language=en\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"77948d729f670f7f921c99beaca6a4ad","sha1":"9ff354a2f6a0170a731a0b73da04f0c5559cdd58","sha256":"11d05e870053ad29979f5928e2e64f98a8bdd4592782c0dd170c7a40170a1946","sha512":"ac892c1bca6075aa3b668d25a838ba29b706db0098c74ef119180686d805ca62731eafd9d54761f1c42cc50dec9e260415f94ce3c2b0517bf25df461524939c0","ssdeep":"384:smaZMXVuHnRcC9riqHoKwpfi3z80CITo5J9sPw:NMHnxWfilCIToCPw","tlshash":"ca52c919cf526e7e07a365c6b48fba56f4a9409856900437fccc803c9364fca739fa99","size":13250,"data":"","first_seen":"2026-01-22T11:35:33.1144Z","last_seen":"2026-01-22T11:35:33.1144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.B0_QvnEW.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"bb2424b90285d46f921f699e7b3d17d5","sha1":"412e217bd4cfbafc553fc36b9094d0ece147a429","sha256":"2b1840010c419cf6839e4a18ffd0eec542b4c0d0c49ce5606bf93639afda5ff5","sha512":"f283f440d13fb69e25c115fd3e9dcab60cf937ed1ad964644f9719abba510e9f99ac82747ef2aba6991de08cbe10a8965c0d352c380dfa471d2b6753beba021f","ssdeep":"","tlshash":"a41100d93cc3d8b0d73bd4cc52a899e6d43c0e88a8fd41c0e4f86e853b155b18236ea8","size":886,"data":"","first_seen":"2025-11-05T08:48:35.692413Z","last_seen":"2026-02-25T11:20:48.331177Z","times_seen":7795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/dom.min.js?5.3.0","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a09beda0591ecfe63a4b3993c503f459","sha1":"dd263d7adb7fe6229face1783dd6675ca7c22a3d","sha256":"0953ab3763d959cf73d3b10688ef7973499f3de164f9cca293bc8ee553beccaf","sha512":"75bdd202717d3aa70ab4fe166b53e6474f355faf70c5c21d26af36685b53f3fe714d2bbaa406edc01955847c217501cfe19b31b6737aa9003fe5375d2d39ea24","ssdeep":"384:HySPZEutwsvz1ltUH02ov+dFw4lU3Y+VBlEPhnNDGeoCbZGULov5EB9+sjdRfO:HyS5twsv5lmAvJ4eouaPhnNKtWZGULoH","tlshash":"4882c7957189b8734fed05a991365307f2291891b84b801cf87c7eee2b2dd4372b6b78","size":18838,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.915775Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-07-27T01:40:34.488861Z","times_seen":26483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2XNKCDX8CP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f295d7fe0bab857ca72c08769d12dfd5","sha1":"cf49db2a3fc66a121cc671e667d7a36cdcca0373","sha256":"86c608609a8bcbda5bd3755fd81361a26ffc7bf8131898418657d7e565d06386","sha512":"a61412260b6f492f52c747d00fed9adc96a9b626beb2f08e5059c4a7b7e17d5a027dfce1769ad9a5801f0b25e485650a39508eeb05bb56d48314b3cd3d2fa2f4","ssdeep":"6144:XbzXo/RhdBAhJZEXOEsrzRUKE7K0go3VLXgeRIBv0sVZHHx:34//dBAhJZEXOEAJE7BIB3x","tlshash":"47a408ce73c674269396f478502f12cba97b25a2b49dc89ab1c9ccf02d3459b4127f78","size":459681,"data":"","first_seen":"2026-01-22T11:35:33.195392Z","last_seen":"2026-01-22T11:35:33.195392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/offcanvas.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc20e6d8a96cddf3b27fd9a15e3bda37","sha1":"fd785f696254979085221d5b51a3e40bc98c2033","sha256":"bd405d7fb9cab4ce3f08f1aa60a5d8e045c942c4a61b387035f00dbd48d5b696","sha512":"6ddbe3963c21430c8f252ffb02e3fa9ff4c39ca2c6ea098cb72d3f5ddbc54523deda8ad851d3db0d4bfb2c894f5696a820d841005e34a6c31c9ded20ffec3a38","ssdeep":"","tlshash":"2d710f0a33d968b29ecd84b29232578bf30c5d95b605461cb46c5eed5b3c88771379b8","size":3552,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.87659Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/popover.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"300028ec8016885b916c1047c69e0af3","sha1":"01a22a94b0399249d79ad7b9ab558fcd0b51d492","sha256":"d1e159734c39d2962a25e086c2f5b60613a3af7b4c7032f1a95b60fddf151c6d","sha512":"6d3eb7ad2057bee73d670f6deeab44be1ea8a978d00cbd2eef895104c1f8fda8f1993e225cf40075050ca3629566e1068788ca8dbd8039af1eec459d47be089c","ssdeep":"192:B3gwNlxmGeTHJezmGnUzRUvqgNIJlbeDCvtbUZFKwU2:B3iHIzmGUzmvbNIJlCDCvZUDJU2","tlshash":"5032855b3215f13306ae89bb8035130bf22659d4ba89c13cb59c59de1bbdc45b233b74","size":11314,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.853522Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026version=2127.0.3.379.7.46.8.6.7.7.6.24.2\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b063539f324578673c3cabf54a3f0e","sha1":"4a778504a399e4c6a4b55f93afc4a42fe6c91a0d","sha256":"6c10cc1bccf6e2e4dddcc92df745c96ed2aee69bb3723000771d2a8a09a87f21","sha512":"f1c69913a5a5615948ce1959d15aa90b73d7c67b398ce9fe92e1a3e8d829ba407c5b56c7288dbe01a225ee9d697e07f1463d72724d6e704a9de4800ab017b32e","ssdeep":"96:s5/1RDp1hQ08wt017RxruKPJwI/EaKtJuN7BTGbmTg3PJvCLq:mTniHRJu+d/pBibmUxK2","tlshash":"f2c14419835fc87f6363915a32cb7b0a74494178b5e8593bd4b4ca70a1871c7d207ead","size":5943,"data":"","first_seen":"2025-12-20T03:33:37.913927Z","last_seen":"2026-01-22T11:35:33.202805Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-04T17:33:10.166857Z","times_seen":29934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.CmKqzCoI.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65a70876993e44c176246d371a29634","sha1":"2cc0d8b7c62acbcf697240d8f66e058f3fe4a8e4","sha256":"b7f86dc1c29845169c42571c402b893b524e84a2a546b2c634b998b8cd42b7b5","sha512":"b487b039481cbe4c29e14f6f2b2cb008d04834457e6c017c016640dc36867aa81b08560f6ca0797b994a73e9df50a7122b73bca225c2bb5489f99ba2c91ed7c2","ssdeep":"","tlshash":"b0e0cacba74038e3f6d5dce5ca04e0e14af323a603e083b0d8de53328325062de41a02","size":401,"data":"","first_seen":"2026-01-22T09:43:26.222102Z","last_seen":"2026-01-22T15:05:12.876664Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.Bm2FYOkN.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ff0775784b6ab818d290f73656d6fa9c","sha1":"cc7313814ea8cb8d8f16867692f29dc2a6bb5dcc","sha256":"819ad19d2c108a47d50b19f2500a4e80e3cd463c7e4bce1c9ebe6aea6701cd1f","sha512":"1c44d7e297f9e5ac37008b538368b8b277e1d2b2c6a5cd359fcdfbb5fa96020ebf66440782c4d84a5e27990504f4486a307ef35a76f0ad61dbb67d3d21a2e8c9","ssdeep":"1536:4uMq4Z7S/IvrhtxyVdUB+Kogm1kcZV3vtwczo:x07tDhIaBXm1pZVfpk","tlshash":"64335dcef141753157e311f2b07fa006b636292c384c81b0f629dd9925ee44ba26bfad","size":53813,"data":"","first_seen":"2026-01-22T09:43:26.415405Z","last_seen":"2026-01-26T07:43:48.592978Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.BMVhEfih.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"49aeb02922b5c8a4ce6e3c6a8c57f6d1","sha1":"f7a789f2ad922f9de5cc36ae2f779b57b296fc52","sha256":"64cbdeb2792d301fc135b79d275c6b063891d427818883b17e424d6e86b77f57","sha512":"0b393e6e69f294f59be73b886cc88d8b44cc23c9c7cf0e5f7c3fc223b620a4b3964c2580e56b8e56eed4ff7cb4cd6190ba9606dd68895972958e9d2f5e837d31","ssdeep":"6144:Y/zuGOGB+feaQiLxXofpbXWQaP7JGaKkH3:MzuGOGB+5QiLxX8bXWQaP7JGaKq","tlshash":"09246cc4f18af43987eb34e6547e2002f63d6d18784c8564f798deb63da85899233f29","size":217354,"data":"","first_seen":"2026-01-22T09:43:26.346896Z","last_seen":"2026-01-28T07:34:27.680634Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_jchoptimize/cache/js/e020fc130dce7e8d0a14c73a54456c21c8e2925952dfd8f529b12dd50bad9574.js","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"523425953a77495b05b8b8ad5ad6ce10","sha1":"3f7b818468cc6f48b6e0460e23efb712eacc854e","sha256":"f1498d53c443c1e25e37b3e1ff6b2aa725fd27b2493db48fd46268709e30f696","sha512":"4378f505ff9f067650809f8e3a75341173a8d48df79c584e1d021fd814bff575d2d46795b384f42b433d529ac86bec6ae06ec7fa9c24ef69827de75ec205736f","ssdeep":"6144:E4UciOxaWTyQTLPCA3XVBvYzfu/4A1KRrF:DBa7QF3XVqfF","tlshash":"10742a9c7191707243eb31b551bf210eb2377929b80a8050f169d8e62dbce89a17bf7d","size":360974,"data":"","first_seen":"2026-01-22T11:35:33.095094Z","last_seen":"2026-01-22T11:35:33.095094Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.G_1c0Upt.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"751f21a2c5f9a6554a3bc2ffe45e84c1","sha1":"d74875d644b1cde26e7e0af4514216f90bf111c0","sha256":"1c4ca4753aae9d9bad0decf0731b7bfc46f04d10beef8b917f7f40c254b51d75","sha512":"b9d5337d0f81d2c65966e23d263e6d6096b73319c0f01c58332ad884b19c5101205ef07f78eda9f7498daecae4fae10cdb5f56fe89bb6da2d1f3a4f3175c5cf6","ssdeep":"12288:Ifc+s9e7SkTkC8zMQPiH0aK1rmBEtO7tkggoSCbWuDDDf+5WqYF7mef1a92B3FUk:Ifc+s9e7S8BEall","tlshash":"09946be47242f538d7e7c19b98bb1609f33d3d09b42a9620f1ade85e3394448d267fa4","size":425170,"data":"","first_seen":"2026-01-22T09:43:26.281591Z","last_seen":"2026-01-26T07:43:48.681238Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-2588802-5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2a1e1396cfef64f658a1097dd9342d3","sha1":"0d76eedb7550269d6b3205eb53590a0c9ba89ed2","sha256":"9fc1f498a0bf551357beada11b5c7735944cc498a0db49d3d5a488dc08c56a56","sha512":"71620e8afda968be9cbceaa773f0f591ff049ae18514f6778a5aa120d3973ace4b5de4c4338651d392592bfb6cc9d0fe5cea294dec44591e7ea55629d3534930","ssdeep":"6144:LzXo/RsQAhJZEXkEsrzQ8Dgo3VLXgejIBKEH9ky:X4/CQAhJZEXkEjEIBN2y","tlshash":"6c6408cd73d6702693a3a478503f118bb17b6992f84cc895f186d8d42e70aaa4237f7d","size":322109,"data":"","first_seen":"2026-01-22T11:35:33.106033Z","last_seen":"2026-01-22T11:35:33.106033Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/modal.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de8d4c05ecee57d9cc714e2a083aacd8","sha1":"a7b74b3c0e0f628c79d2fff346b1fc79291f1a48","sha256":"d8f06e289f25df0eff3941e9ac21e652c840e6b39cd7cbe4f8e1502123400352","sha512":"62c1226be80020add13704c6d4b933201d8e6d706791a6232b732a2dd0a0e7718386859de5db716c6ea24ecd66113b5fe97ca8125c1bcc7a719d575b9484da01","ssdeep":"192:W3bnzDDr3MyiqtZgUgVc3ZkTDFP0k7MVuFu:W3bDr3MyiqzgUg9gVu8","tlshash":"8ae1b59a33191c324acd85b3a1b64bcbf2244e99ba05465c383c5cde196cc863277ff5","size":7145,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.888959Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/popper.min.js?5.3.0","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fc091b6667e39bcefecdcd559f683daa","sha1":"7b431fc4c2b985e46fb1608134452733c42ace70","sha256":"f534a736511d57e6673f4751edef892b97c95f0c609d22da3ba31d495c2fa0e6","sha512":"6dc8aaaf9096d5d235ff762a9a397b46572033927697a7cb22df765df8c6982d3514955348ba6cf6820719097cc1a67c035d6f26e74c39e34a77998f33f1a96b","ssdeep":"384:opgIG9Nb2Qt42DGdngpc4j1WMYLUNfzw3UkJsnH3FsMfMHHTmasMo4SPkwlYJa:oiIG9Nb2+42DGdngpI20kZDMHHSP4SP7","tlshash":"2392d7883994f0b6436f92ba807f411eb2336930514ee100b255d6dd2c74ebaa66fd7e","size":20635,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.858523Z","times_seen":899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/popper.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78e47118e157ccf4d07fd84919783d14","sha1":"af070ed2383bc7ab6a5285ddbacb89a1f78c1b1a","sha256":"727e5d96f1b1dc5a21056c695a97fb60a7ba131158b0dfe0a338088af95c816f","sha512":"6e3cd95b1be0301d7b649274e70c26f9054bcbba2cf9bdf727a839bcc8445a7a865e321e09eb3ba301aaa4b7b805a5a2d647910ec2b8abde5b2556c366f37e2e","ssdeep":"384:qyvEyVUsmqx2pKYLHcH0O75H7LFuf0Jz/+GC2ozRz/yFbj7gRL50AkTzrm6kNOJz:qy+smqmH8H0OxfoKvmz/yNjERd0ZTzK8","tlshash":"10a2c8cc3590f0f2152b83b6906b111f7233a935118ee510b255e6ed3c75eba626bd3e","size":22552,"data":"","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.283254Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"adcdf6524943d087c33085962c0dff7c","sha1":"36b1194b91aaa44bb4e8fa1486d2e30e17f3fc87","sha256":"b5cacfa1da295f623850d3175f1011f5b7c144de9325e25b1da2781d9e5e3867","sha512":"94280dad28cd54a61a875c08aee708ad5b843fe5887daac18f7f9f9ef9d66f1221820aec2b27ef02d3cda3733924e836c96002b5e368a964fe181bd7ed459684","ssdeep":"","tlshash":"8b500000003030000003030000c3000000000c0300c003000000000000f003c0000c03","size":11,"data":"","first_seen":"2023-04-13T04:48:32Z","last_seen":"2026-08-06T04:33:47.396607Z","times_seen":1286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","size":193,"data":"","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-04T17:33:10.206718Z","times_seen":29138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/showon.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89164626012583289d8c93073d7b67f7","sha1":"f79c256660e2c0ca2179cf7f3168ea8143e1af82","sha256":"c60abf7900b31bb3a6e46ba1f1823fb51d02998584ec59a7c5fdd1d992842d33","sha512":"f92248ae6ed47d846dcbed65d1811a816223601628bb51a27887cb374d2b486abcf548c6d49080390aed60272659dbca93fad0e82a4d7b933db3d8e4931bec84","ssdeep":"","tlshash":"917151e66278193285b583f4a9a8cac33b32be11ed47449cff1d8cf39724d816c96479","size":3553,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.892605Z","times_seen":414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/jquery/js/jquery.min.js?3.7.1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-06T19:51:22.003153Z","times_seen":184291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/button.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54f4809bf0210289d5b74eda25e1f5ef","sha1":"a5116b31eea12569a373bca817518225de621d0a","sha256":"ab2d8e0096d69b602f5d18fccf8796214bfe6891ac699474c8a71692ff9ce746","sha512":"d507c5de730b9c2c3e1b9aa0376b6ae913c9c842d9b0e5187f682550c37448be1456f493f8b55aecfa3e97948dc1e250afc78f9bbad56e2f89254e7b07b3eb0a","ssdeep":"","tlshash":"5801fd8ab305a1f78266524c322736daf196c899a021006c3a2c9cc77f4a4c735be6f5","size":787,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.924776Z","times_seen":496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/collapse.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc6cbb582bac08d3709c425b940c63b","sha1":"d979ac44673efaa4d9df40610127e8e07321c75b","sha256":"aa9c393e3c42f8c5d0b24bb39314e5894961a0dbc99adfee9b0b1dd97978879c","sha512":"684bfa63a02185d2efef1b90279fea45e676daf0ba7e685ce23f47bce2050dc15a293d2b26b0a6ce67fd86399308d324fbfb90253dbf620572f4907b0f5d7848","ssdeep":"","tlshash":"5981410e7240257345de8aa28236468ff7358e887254566c742d9eed2e2dc863273bfc","size":4047,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.875696Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/11648703/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-05T22:39:31.440318Z","times_seen":28115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/dropdown.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"249b0b529fa57e14d4f6758a1e6af1d9","sha1":"4639ff5a865aef2883b6293db643987edea01521","sha256":"ab9b6fb6e9491507f98fd4c081b9c3213664d446d51168d2bfb9665dbc57cb8b","sha512":"13929d76acf176301ae4c4565c4a7156734df1f1a2e484616e77a8444faf398a2eb8d1c4e03108ee617cbf49a2bb2af22c71e0b9671f7f33ce8dcddf49476219","ssdeep":"96:iTp7M1D92QpGUynvxcxklRN7TSfib6sEUiXHlFOSJnF+OCYSjc/oNL:iTp7MGQpGtvCxkp7TBmMo/h9CYSj4W","tlshash":"48d1d7997240f47715e908b992b2470bfa279602311a902db5bc89fe2b6ec857077f78","size":6220,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.887613Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/scrollspy.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6d1a094c1f6df226b2c85e0ecb0412a","sha1":"46d6f1e9343396a458789dd8739e492ca3a4a439","sha256":"72dfca876a94bf1092bf2046ad7f8200ec917e7a1edca73e2049b740586b2e80","sha512":"01b5393aa928f8c7b408ef491401bb8e79fcd44572fd72155d4a5452d53f239cbb7fe96194625cdb986f16df5e45e645874a29ccb3a6d954e2d40809471196a3","ssdeep":"","tlshash":"8b817706728065ba41ceca8d813b4347f3291cd57346d4bcb93c7cde1369fa279626b5","size":4096,"data":"","first_seen":"2023-12-04T02:56:41Z","last_seen":"2026-08-06T11:08:36.854207Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/messages.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a516911b85fdab5112f9684d8b6046d","sha1":"7f7aa28ac8e8d42145850e8b45b3bc82ff9a6411","sha256":"251b55c8dbd66154c2163ee5e53808c394678405276d6ad5758e848ccd1d37be","sha512":"5e77989e1fd16e50cfd40a1b5bc870a39aeaa3665f5b3d719f43238598d6ddaade4f1450e743b36e942af79f42a27151594b41004c2a7bcf3adf0b1fb95dbc25","ssdeep":"96:wqTRfG2U+hx1jgkY1iW3geER3M9hVv4Dl9dFQIeMCkRH:wUe2/+kIiW3Q3Kv4DlHvCkR","tlshash":"fcc122e7e2572f371bc8d289602d2a81bd1a6051c02f6c2c765cdceedea9d40257e732","size":5598,"data":"","first_seen":"2023-11-29T12:15:38Z","last_seen":"2026-08-06T11:08:36.890259Z","times_seen":1410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"b64bd103892c2ca6c8899337e5a5bec7","sha1":"8876122f7d35bfc7f83c84293fdaddcb6473faec","sha256":"71defa0c4d34b71d312d268818df156f6b873a6e55bc753478c6f5149557f89f","sha512":"50d1fc4a77e4add35471237386edcc0f3b21c70308346e850ecc74ee0ef3f043feaf2812312feeb2e34b13029dfa266fe2c58471a32f45eb098bb084bf38b41a","ssdeep":"192:lkC2WszNfDq+sV9kXjLMAOghWH5I/LDH5pHnQf/upfC:JE/jLtO/I/Ld+f/upfC","tlshash":"b9d1433f416113298017ed684bb467078169e8667c6e77f929132a2adbcbf4205f238f","size":6398,"data":"","first_seen":"2026-01-22T11:35:33.21031Z","last_seen":"2026-01-22T11:35:33.21031Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.theturngroup.com/media/mod_menu/js/menu.min.js?ed020df79f500d6768c656cda8646f5c","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/mod_menu/js/menu.min.js?ed020df79f500d6768c656cda8646f5c HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 725\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsvciQ1kS1oC%2BBwQwBfDtSy23NP2KLBrHtMX8jDdCFNJcia02771fpWFDXPdpUJZWl%2B4THl8QhZrrcwwx0BihoOrvT4r%2BEV95SVh8OW6iCmS3O4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c2c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2308,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2150)","md5":"336ce0f372e6ee7655e164cf075921c0","sha1":"416d284e7b4b862d3c3ef83ed8ab0d4530f7b4cc","sha256":"7a0907f8cde675e558b8ea47128bd23f49f21938f25d140826c750f670265489","sha512":"36ea97ced14429328f28913fcf827e026ce712f75f85bd79ec01be7558691b030608adf35e8450a26bd7e2184a184ce6de025254fad0117d3d6f1aaa92d6e8e8","ssdeep":"","tlshash":"844133310a1019b35acae7eea0e2d8966737089bf4024861a435ce4f492edc112fb5df","first_seen":"2025-09-09T01:33:38.423153Z","last_seen":"2026-08-03T08:08:58.028874Z","times_seen":21,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-design-development-company.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-design-development-company.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10718\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8t2vQOlStNtcJC3D%2BCZOL4QuCn7EXUGVhure%2B8CdTB4lIw%2BMbjbvXy9746DyXHmHlQOotLUKMlEuSASPtE%2Ftwnoquz%2B0xRFPTFiUSolGBRasZc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed99d3623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca8e6e69e20ae7feb57bc87ede8136f8","sha1":"47999fec9510376d2c7556820d1f0052fc8b7cc7","sha256":"3d278fe8239dee27779ba90f41e2d30d60db0136b191d84d000a4a213759ae09","sha512":"2db75be26cddec78fbfd398d005c3ffcb17fd160691b864ec44b5c59fd5c6ef6a00c5966ee874ae2b03283aed60f7b250ff0123b83e44be344374aec853d7436","ssdeep":"192:AnpUB1EvvVO4kjnwjOHCSWD6ZH22Q7L+4x1P4zzGm0lCX+LEvTZPeVJNPLhM:AnpUBgVOhwCir6ZHlMdP1m0wlmg","tlshash":"d822afbc9f9028bd6a72fe36c71f65511b18d8e04504832473b3e226c0c92d952f54de","first_seen":"2025-12-20T03:33:37.905032Z","last_seen":"2026-01-22T11:35:33.013823Z","times_seen":3,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 20 Jan 2026 20:11:37 GMT\r\nexpires: Wed, 20 Jan 2027 20:11:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141805\r\nlast-modified: Tue, 18 Nov 2025 19:01:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44192, version 1.0","md5":"1c278435b6738e80614efd67b0aa1d75","sha1":"553a407dccbf2e476e53a88b9bd5c625c48d8f99","sha256":"9ec9eb9108f1752c30ba316606858d685a112a609d8bef1fb3d5d32c8e0b6507","sha512":"7b05bc06e51a460927d557deb8deea554c692b6edd381ed2e1e98daebb026b3de471c56278114f48a31c075d2dea30200acee2f2a804246bdfde61be1487f9ee","ssdeep":"768:dji8cRMN2W5RiThDSklZ8iD/ZbANTt4V7NIPuezvbzstqP+l7rx4HDgcq:dteE2WriTsOhzVMfTEqPI7rxkDPq","tlshash":"d113e17ba74b08c0638388b867367bedf5e5c0218b5c5ef85221f481f20d759a6d92b7","first_seen":"2025-01-09T01:43:24.38206Z","last_seen":"2026-08-06T20:09:57.877371Z","times_seen":39593,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":78,"dns":1,"connect":21,"send":0,"wait":27,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-consulting-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:13.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-consulting-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14672\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:13 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HA9dOTkWebidHDmk%2BcHEIfIMxDimxPEne9sRY9Dhz6vF4pBF4HitXQ9UE%2BNOSLZv6%2BHy1uWJ0Bxb6knc8qb0f6oLNnKhI0znqT9kNPDDZYBqTrU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf242a3823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c66a6829b8772518b3418de9a0fd1b24","sha1":"57d87a3670f6ed79ebd037a68f3a813c4f105f21","sha256":"a19e20c0399d1c8528702c502c2805e464625d17c840200cd25ba5ff6a880f3e","sha512":"5acbaa72a4e28bd93706c073c520d8edbe154ba1908f3c39408db0c63110e91ae7c4f95514ad5aa86b3151136d4d4d18d822d94f24d16eeeec5754f1a5be60db","ssdeep":"384:z15FS4mjGWhqerd0ly7U6n/pXzTsEQBoCh7IvZJaPjAu:Revrrd0mZsNoI2DUMu","tlshash":"3b62d077334a064cd85f0b314943283f2aba55f8250672c9243fa059b97aa40ebbfb34","first_seen":"2026-01-22T11:35:33.019408Z","last_seen":"2026-01-22T11:35:33.019408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/mobile-app-development-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:15.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/mobile-app-development-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15172\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:15 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XU3uNCyh10llhc5A8OhefQRga93pTdtp8WN28p42yre7XH1jpP%2FghYQF57Fubf%2FuInq8FSXgF3bOasKBrf1DFcSaEE%2BdvyihAmSpnY4nyWdiwkA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf323c4223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15172,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a3d7fe31d87b6900fb0247388317e4a","sha1":"43da049611079c428362e7cd7fbb4104d69dfd65","sha256":"3f6c7d70338bcbd2b72d1414f550deafdf274f17f7cd8ee06adc404d6a6d59b8","sha512":"3c90af5d632b0126bbddce76bb7c8a2d723549ce56be860a4554f56a52f5c38564b97e39b93dd8a21fc19ea49d01e26a9c0aebb7645e1135db70233d53268b5e","ssdeep":"384:515FS4mjGWhqerd0ly7U6n/pXqWJGVLonyigh6Za1L/UvXaAaYYBk:bevrrd0mpJGwC6ZaNUvXaAsG","tlshash":"9e62d17abb890f2d9cd73320a643af2535f517b93458a4842d5ea505d209e8126bfb34","first_seen":"2026-01-22T11:35:33.022553Z","last_seen":"2026-01-22T11:35:33.022553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-development-company-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-development-company-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4140\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqhN2i2Ubxg2xtAW5vfnfw%2BbQR2oxG8Iff0dtl4g6pzJrXz%2BD7nESjL1Vk%2Fdk2cMOPzksi5Iyqlwm2wAptzo4It8QxyLddG5gFC5TzTltEeX6eI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf385d9023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4140,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f29cb6e49b1d7260a1a6747fa3906963","sha1":"f7eef4626a4bbaa6880bf58806cccbfe00ef5725","sha256":"e7522f6b376ba84a9c95377a467fd434dd9be6a4d083272bf113a0f72fe138d3","sha512":"f5e870b78cacddb5e2cf9900b7b8627b6ca2ee5c0348725beb3a1d6bd03ee9286788b6a48f2de767064a754c2c5a480075c80629af3f1c2aa7e51a7165491652","ssdeep":"96:hzGSe9tsc5zHDKueLGRUctee17ZzFIydwuMQJWrN+SCRvVjVPgBE64HN:ASSfnKurtz1TuQJWQ1jjtmHoN","tlshash":"7d818ef891f31fffe2c44a2148667d29e180f9916808cc608d150cb71a5d5916736de8","first_seen":"2026-01-22T11:35:33.026514Z","last_seen":"2026-01-22T11:35:33.026514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rH6CqfMTiXymefr6fNL%2FN3X3YDAnirUIJQtLtNAw9P3wQ%2BmfhiufazugKg43UtnNUrIaTx%2F95rMQNl0skyA6rOuKj5udA7EAxHAzLUnc9VgSuSc%3D\"}]}\r\npriority: u=4,i=?0\r\nexpires: Wed, 17 Aug 2005 00:00:00 GMT\r\nlast-modified: Thu, 22 Jan 2026 10:52:14 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncf-ray: 9c1ebed38c0b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]}],"data":{"size":486645,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"257c8c0350d5c4db50f15e681086e4b6","sha1":"16a6d435f9ffba1b4586a7261d417cdf83ef027c","sha256":"ba1669860d54f93c11ee63e06e416750c457bd8d962b55ad912ef44f8df14c09","sha512":"a041b912168e96d3434153f43c2b864532282290b95b9cc4d2adb62f85bae11ce7054ffc581d3b1c63ff335837788ca620ec150549d1f060400e2197dfd77335","ssdeep":"6144:6JZU9O976BiVQvR3pAtiaZeRz+yLKR9X95rKvtKVMKRtVRvGM4F9gbDPRPyb1LD3:+UuB98","tlshash":"0aa4d4332802607d4e2342d4f5d62dee735ae415e74b22e4adb6e1948fcab874233b5d","first_seen":"2026-01-22T11:35:33.029319Z","last_seen":"2026-01-22T11:35:33.029319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/css/vendor/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/foundry/css/vendor/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/media/foundry/css/vendor/fontawesome/css/all.min.css?7e64b8be04f0d43879fadc7326fad717=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13276\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:10:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXjdfN%2FBcbIgmXia4%2FqW00adJq%2F5kriesPtYcgdUsnDEwz1W7GYuRZFfivzRPN4BK9orCK7i5zKy5BanAQO09gBc3NmBOB%2B9pXXxftdJ%2FxT7esM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed65c8623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-08-06T19:55:09.568555Z","times_seen":53617,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/11648703/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /global-mapper/lc_license_id/11648703/region?jsonp=__lc_region HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nuber-trace-id: a7b1a871eceb35cc866466851545e1c1:fc2640498c132990:0:1\r\ncontent-length: 35\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-05T22:39:31.440318Z","times_seen":28115,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":33,"dns":10,"connect":2,"send":0,"wait":153,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-developers.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:17.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-developers.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3030\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:17 GMT\r\nlast-modified: Sat, 09 Nov 2024 18:27:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxRW3hGro7u0%2F1u1sTE29AKpQ175d67Gh4zFQPu9%2Bgo6B4k5Gy9ljNBVTmR6gXTannG9h7qidzLFnnnTB0JcQZ48VOCqVpSxHec9IpD1rRFYiI0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf3c9e2223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fced2507e8dd09e79ca73b5345436a84","sha1":"0e0bc908c0649d4253333e8f4757d4a743ceaa5e","sha256":"5eb34e88b8bea1a2d8c49928aff442dfc7735c4b5417271861d699434abd6cf3","sha512":"91b20d0354d424fa7205cb082a7c47cfa06f39168fbda0874aa3136f5a82c81d369fdad4763b2ae798158cea9db3b41e21b7fbf209e86bcc14f0ba4740b8d13d","ssdeep":"","tlshash":"c15129930b88e951fa874d392df900715a89e0b897dc13d6acd4f88c695325f42e684e","first_seen":"2026-01-22T11:35:33.034114Z","last_seen":"2026-01-22T11:35:33.034114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/joomla-designer.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:18.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/joomla-designer.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3294\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:18 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuKY2yuVUWyZyGZ92G9nPLqmG7HOVSsr11kr5NzvKRRXFY1CSAdBbj0NcZXxUW24tizgvHRP2QEvI3qN8EeApBMU6e5GFV6dcZmpFiWO0IWiLLg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf442f3f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"589d6100e2d1ea2ccab7232018e238d8","sha1":"436c565902f7925a0db33e21a72118d9ccde38fb","sha256":"c7560683144ce96689abec2ae185c82582882b2ee3886b2e10d9f46b26ff7f2d","sha512":"6b8cf061d7107ac744b688f701c4098c426205e303ddcb036696dfd89ad444ae025939784e7aa7b1dacd1f1f60f46c6eebded7220c8c8b79efc874168231db55","ssdeep":"","tlshash":"ff615dd5ec0279c09a66a3a8b58193d83c134df5a258d5fb247415c8013b2fcee49bd6","first_seen":"2026-01-22T11:35:33.036239Z","last_seen":"2026-01-22T11:35:33.036239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/keepalive.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/system/js/keepalive.min.js?0b6ee2b15d1812bf231ba577bb7488e3 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 396\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMtTAIXYDhjl%2FiWUijjKxqNBL2bs6z8Vn9PKMKyDYT7zm6bOxjXnK04aPOoS1qlLpfvYMDiKhajOHm39KO2uyu%2FKqPojzPRwpCefmpf00IzBtEg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3cc1623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":741,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (581)","md5":"08e02523a40f3d0b1e0e3b0bd1a0f013","sha1":"9f10654c2f49ca104ca0449def6eec3f06bd19c0","sha256":"983c4e677c121da92edce183d530881200e0ce545ddca1174bdb3eedb7588619","sha512":"5c7a1fd65c18696e4b3a154638ccc0e35ad42522bcbd938c8296f489a49a4ae64cbdbd8cab6185516549218bdd674893ca06867fae9fa67b284dbac70f1f6212","ssdeep":"","tlshash":"450145130322825e84c19a93052976e2a632c753fedf70322b54dec165ef90ad58a997","first_seen":"2023-12-30T06:58:07Z","last_seen":"2026-08-06T09:42:02.298684Z","times_seen":802,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/tab.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/tab.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1912\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ft7k5iCimV97pG7DIYJvXj%2BoYmXa3Kp6VfV90UpayNhSrjPzpNaT2TGt0HPstfER7b6UotRJI0JjbDfGuDluFX1Yi8uC9xw5kIjXY%2FYJv98hcAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c2523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4965,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4964)","md5":"bb5a3d21c66e8c8456f2383cd16b3401","sha1":"c719398dfe82be594294a1c202f94705928e8d92","sha256":"8e6efaf5415f1d6ec65dc8a3a390cd755141fde2a83ad39f5020bf0b849c071d","sha512":"8b0b20fc7c8d588724ac11f5d67a2343ff5fa998eb48be4eaa99c7e1a3e0d332a25329b232e088db7a203ca457eb9177583745321ba710fb6a4da45d068b24f0","ssdeep":"96:1GIC9kHFFG/ojUeMfULBezGSSsQqdCmThokMS+nc6s+:1GICqHFFG/oZM6BLSSLqd/tl+nc6s+","tlshash":"0ca16577319426774cda2cea4032aac7f51968a8a5834524b52dccdf733ecc23477ab9","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.851781Z","times_seen":508,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/components/com_sppagebuilder/assets/js/sppagebuilder.js?032af75ad5933f9f9a025db2a15c10bb","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/js/sppagebuilder.js?032af75ad5933f9f9a025db2a15c10bb HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 21913\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Sun, 17 Aug 2025 14:27:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gal2b0bmceDfBGAJrBk%2Bun32NWqB62ancUlRon09wt6QPf07OAFkRr51A4q12%2BUSsZhBWsoMENKUE45wL%2B%2B9eY0Ii%2BeMfYNZwjN1JqTpaP%2B%2Fc8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed41c2f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82249,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (35578)","md5":"601dbe573d6a5a3d3bdc025d62d6cfc9","sha1":"ac12a6343b378d4e96bafa1602ec23dc8d208101","sha256":"3829ab1ab210fac19298175b96a467a1d8f2fde21160fc34b341fc4f28c8ba3d","sha512":"20d20e0d799f692327fc74064b1bdd9dfc5e2e0e54c8a826aa3c2d04a297a954abb650a4f3717085aa3523bb37de11a834495c9667add8f8957d818fd1da1bbc","ssdeep":"1536:hBIfDaQ5EQNejHWv4UgxuyYOcWKhJ0N8lc+AEnDAUFmwaLBqUUA8UusyyoTtjZnt:h6WQuHPuyYOQhJ0NkcTEDAUvaLpUA8su","tlshash":"9683d768b21534751abb62f1106f4649b2326938e50280a878bad5f61f7ccc9737bf7c","first_seen":"2025-02-27T18:47:39.661469Z","last_seen":"2026-08-05T22:26:55.903472Z","times_seen":525,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-design-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:17.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-design-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8648\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:17 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpcTMKPC7ceLgmLfug%2FFcz93bLWvz8AzM9SwmiFG1%2FCf96m%2Fo0yIqJa471nPVcNqPjNBTGNLG6WEwu8Yxy4Kxy39mpxuns0%2FZCBn2nbiNczQEM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf3c8e2123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f68d09e0f6867d8437cce9efbd4f8faa","sha1":"43232dbf0d861df93040fcb7d1f9bcb5dbb0d80c","sha256":"b8822575248ed18e1df848e60d3d58261a4713f701901cf04cf776dd03033931","sha512":"aa6bd949aee3160247fa4b15575bbc3bdd77d87425d77195a937ed47f59851b9fd1fd9cfcb7ae3f166b834dabf9834af7ac9e01fa66787a9a03b1038fd4c1ad5","ssdeep":"192:HliW8MX2ppwZ3c17hRgiokboOIhUMJQyGVCI1Pz+ZsZTCiYoDdJvdfp:oW86+m3c19RgioFOIhUMJN4aZsMBoDJp","tlshash":"7402aef18d230978e9cb40991c2d2831f3d68757ee9d01de86b8386cd0cf5fb66a9a50","first_seen":"2026-01-22T11:35:33.041175Z","last_seen":"2026-01-22T11:35:33.041175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-22T11:34:59.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 17 Aug 2005 00:00:00 GMT\r\nlast-modified: Thu, 22 Jan 2026 10:52:14 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver-timing: cfCacheStatus;desc=\"BYPASS\", cfEdge;dur=9,cfOrigin;dur=269\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qzp8%2BUAPuFY%2B5Ry2ZjSpBpgO3W%2BS0Fqko8Xk95I2l%2FXhF2wQEyi%2BvLHNrS%2FlmjCOAPzCKFN%2BbEFKGTEEdFjrkI0gK7l%2B%2BdP%2BfvACFPx%2FOdN\"}]}\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9c1ebed03dcc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":487143,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"af2df63f7dd4bcbdd277b4a2552c2a99","sha1":"bb79399d04b3f6a5d908abb82c84bfa2bf62b27f","sha256":"57632f037621e3e3a03cabb2b6b5da4424a6235db20e9f63fc85bbf2c427d595","sha512":"ea2be70915f64b8f78664cdd2176b80ac0b2a09364de3266eb21d161936ed4ba4b7e8b75a4fd5cf1039cd5dd0852568f2d45d4844766a8d1564ed01c5e9de694","ssdeep":"6144:OJZU9O976BiVQvR3pAtiaZeRz+yLKR9X95rKvtKVMKRtVRvGM4F9gbDPRPyb1LD4:qUuB9P","tlshash":"3da4d4332802607d4e2342d4f5d62dee735ae415e74b22e4adb6e1948fcab874233b5d","first_seen":"2026-01-22T11:35:33.043805Z","last_seen":"2026-01-22T11:35:33.043805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":288,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/carousel.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/carousel.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2284\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NaiEsSfJ6113%2BBvOx%2B%2F24rel2J8nOBfxbka8ZEJCqiURpK01p75o5u7AZtxOpaqlpXqT7F3IGOCA%2B4EnBBMUlc%2BCx0alAhZCqZTDm6II26wXCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3ec1a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5752,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5751)","md5":"0592f2fc779600529ffd38b584627ff8","sha1":"e2e95415984dc283d8df341e5c735dc72d23ec33","sha256":"30c88a7a41bd2aff406cb4ad3bd95c3681741e54b89e34376eed85a2f42dd056","sha512":"421b4f4149af10d9f496c1845d941394c93af9b78ca94008f3fb5b5972b2c730bc81f65747dc84d408e338c35acd17065f458e8c658b48e3e59a23f79da54203","ssdeep":"96:FxkFmrUriggt9bHDqsiQoAcjb3n5/g27xHJVR++9Te5vT6QTFLzHi5XYQdx5:FxkFWUreHvqPQoAI35/NHJVRN9+vT7FU","tlshash":"fbc18657338a68324cd2add64136c643f7185d962606409db57e1cde2b3ec82f23abbd","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.918411Z","times_seen":495,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/popover.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/popover.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3523\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gZ8T4F0oxjnSlIXfOiaNfVrhfnVhBEN3WraMl7zNkj2un2Jc4YA210XL1iY8PQmVZy9oyLVX6av8k%2FAGotuFdyV8h5RG0idWFp7iAGk%2BPMzFxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c1f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11314,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11313)","md5":"300028ec8016885b916c1047c69e0af3","sha1":"01a22a94b0399249d79ad7b9ab558fcd0b51d492","sha256":"d1e159734c39d2962a25e086c2f5b60613a3af7b4c7032f1a95b60fddf151c6d","sha512":"6d3eb7ad2057bee73d670f6deeab44be1ea8a978d00cbd2eef895104c1f8fda8f1993e225cf40075050ca3629566e1068788ca8dbd8039af1eec459d47be089c","ssdeep":"192:B3gwNlxmGeTHJezmGnUzRUvqgNIJlbeDCvtbUZFKwU2:B3iHIzmGUzmvbNIJlCDCvZUDJU2","tlshash":"5032855b3215f13306ae89bb8035130bf22659d4ba89c13cb59c59de1bbdc45b233b74","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.853522Z","times_seen":569,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407700\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-06T19:49:38.936749Z","times_seen":957385,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":216,"dns":0,"connect":21,"send":0,"wait":8,"receive":2,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.BLrr1qtb.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.BLrr1qtb.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Ww0vqcAH7u45dPWavKh1BWGD0QN_bmkfqJtNxzPGr2cXDeL6nmgzaIX5hdDNDh_iTHndh7kko\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\nx-goog-generation: 1769073977124371\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8380\r\nx-goog-hash: crc32c=JD3NRQ==, md5=Ax9cMb1ZCZ5a+8+w0CgSHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 3168\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8379)","md5":"031f5c31bd59099e5afbcfb0d028121c","sha1":"724961efc6bc1cb4f051e09a0eaa6ece9ecee45a","sha256":"9aa52b43c449176eaf4ab495c721a4ae03f1b4175fd7ec14160ca1efb8557205","sha512":"4203325e93cfb55241bc5b423b6150a9f76e15ac3db7d91fce5d11acdeaabbe7a5012bcafd9b99731cac3db214c7c50421bac45941364e2c0e78acaf74d0b0ca","ssdeep":"192:+Zt7jz9crFCyJf60llUteY9s84NaXsjTownsosM9XXVXXcNPYIZwk1o3J:+ZtECyJS0llUt/9PK7QpM9ViP7Zw4Y","tlshash":"8e02e7bff741e470d3db55a1ad1a0003fa3a1698399d8170f62c8d24615e5c4a277feb","first_seen":"2026-01-22T09:43:26.435872Z","last_seen":"2026-01-28T07:34:27.586033Z","times_seen":110,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/managed-hosting-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:12.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/managed-hosting-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14144\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:13 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pn1v3E2iEuHKdMhLd%2Fp%2BHM%2BqHLJcMK6vqxPUQUoGnY%2Fwha67NoCFv816Ja14U3UvVL2r8WZC26dGS%2B1XQ3CGQGVdCYEgvpcUt2HUg1OmSVUS%2FKY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf21a9b223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cee1074c09cbe358a069e81f455dabd6","sha1":"4f8038a4ad00e608a0e7075bfa3650492254fd34","sha256":"d3db17777bf46337ec8a06775a25f9cf29cfb0ab2d9b35f8038d082a822a2ef7","sha512":"64e555defc207410a241cdff709c29421e43f4f9b0a8d09bfbd6676a984b022b8f5ffcc30ddf1662149a856f571c5d55cc6b5b06c0372e7dac0d602e9c1edca2","ssdeep":"384:p15FS4mjGWhqerd0ly7U6n/pXzZDJCqFJS3rlN2+:revrrd0mhfCqaBND","tlshash":"a652cfd77f851e0c28df06650e92298d3b330d6a3c953a19ed7a3549e075b020bb772c","first_seen":"2026-01-22T11:35:33.050419Z","last_seen":"2026-01-22T11:35:33.050419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-design-in-kc-mo.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-design-in-kc-mo.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4892\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22dad8yUbfLD77MEcoCHztE63I8sN9y6Gd7MXbluNUoWI8zUMi7uPxbUo3A%2BuZHHHen5VUDFrkP1uadnG%2BK1Fe0pKbQqDsxN8J%2Flz3mtAywaKis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf385d9123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d48171fdd40518c3ddb8d6472990620a","sha1":"8d5b1cb6d5cdd8cb7325d52a1d40be6bcd04b7f9","sha256":"59a4a055f278259ee428c8fbf9329042fa722b96283ef35e9d6eac50138e3e20","sha512":"5aebdd52c5b544b9d6f43be80095b4615e7a6b8e95134727217cff5e71859d9ec8f8d0172f797da08cc912575454f40038ffe32f4586c7b3c58d1264d8579693","ssdeep":"96:hk+A51a6xJB/nUwFeHMCefku+KMKWW+cNCdrRw+gMbwqYkSdAoWaOY:Cz1aCJB/nUMhszLK7+QgrO0bwxk0Ao/","tlshash":"13a18e0a6170f910dd6c6874e4a8644ffb5b66bc043c7693083551da046d6fb6d438ad","first_seen":"2026-01-22T11:35:33.052457Z","last_seen":"2026-01-22T11:35:33.052457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_easyblog/scripts/vendors/ui/position.min.js","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/com_easyblog/scripts/vendors/ui/position.min.js HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2326\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:11:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bKglOADwH2lAxHCTVp8q3ITSKLzTHDi0gAdXcXw65pVhW4nIxDq7VsO7QLowTP0%2Bf2YJVbsVHdV1gA2hHougGkW%2FM0Lrw0iNJfkKOTN8bcwPvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed83d0f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6177,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6177), with no line terminators","md5":"4a0ac07dba6cbede575d3f21d89281c1","sha1":"456fcda6e4bf62d8e7f896f4f824eb0847bbaf58","sha256":"400c7cd037af12e5b5e6bd3327b3794f57976dcaf229cdd7a3f3492db4811edc","sha512":"791d238b664684e1601e030ccef3a3d76f02b4111f67cceb9fae839976c5be2378aadc67c4e35baeaf9c8eaf3cfd7935aebe3a8c3e3791300d29b8373c7881ea","ssdeep":"192:q3bXssOt7qrvlxxDfiGaJhxlM2W/kEXczie:q3bXssOoa19lMYEszie","tlshash":"98d1b5b8a3167c01c2b7f2069487471cb1359124bb2fe14af26dcee978a799821f3d95","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.273537Z","times_seen":120,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-awards.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-awards.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15366\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKvf3cr%2FEMLGFDciYEZ37fWwxRcUWWltmxgjLYjAKH1QglPJLqRj5LHingKPAkWYhlrR5nv1Abdmbz8GBhXXWVScc8ME5p5t8Bl6t3pwShw%2BI6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed99d3723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3ef3b0e745ff3900c3f771789fbe325","sha1":"46215f790815ac7cc09f011c7541c80200d806e4","sha256":"553f3910d42d957f0566af6e7884f37bf69b34b683e33550a2bcd999d6c325de","sha512":"8a0e557600f1946c464a64b41f03fee8b37766eb2a1b4387dcc79f9022e7785dfc06ecf931a196c97cc758adb6f1c67082e0d0064a01aed7b9572e8a9b61da5d","ssdeep":"192:BTTudqsCr9tMZdLlWdL1q+3/wy/HCh8dlPxEUPah9hFsM5SfI/2ZMgbaukWpc4:J7OdxWFsPsChAPBk9XL5sI/abN","tlshash":"2f62d07031025cd8b0c8040616a5aed169a8da47b08832bbb34a7ac598d1efd77ecd95","first_seen":"2025-12-20T03:33:37.887647Z","last_seen":"2026-01-22T11:35:33.055556Z","times_seen":3,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.G_1c0Upt.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:02.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.G_1c0Upt.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UkTsqwb23I8WQdx_c1rGw_N773I2iAEOTwOuB6soy-Z1yxkVM9FCgQyIJmMh8NA5vuwONB82N8-jJt_g\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\nx-goog-generation: 1769073977158352\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 425170\r\nx-goog-hash: crc32c=wtEcqg==, md5=dR8hosX5plVKO8L/5F6EwQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 120157\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":425170,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"751f21a2c5f9a6554a3bc2ffe45e84c1","sha1":"d74875d644b1cde26e7e0af4514216f90bf111c0","sha256":"1c4ca4753aae9d9bad0decf0731b7bfc46f04d10beef8b917f7f40c254b51d75","sha512":"b9d5337d0f81d2c65966e23d263e6d6096b73319c0f01c58332ad884b19c5101205ef07f78eda9f7498daecae4fae10cdb5f56fe89bb6da2d1f3a4f3175c5cf6","ssdeep":"12288:Ifc+s9e7SkTkC8zMQPiH0aK1rmBEtO7tkggoSCbWuDDDf+5WqYF7mef1a92B3FUk:Ifc+s9e7S8BEall","tlshash":"09946be47242f538d7e7c19b98bb1609f33d3d09b42a9620f1ade85e3394448d267fa4","first_seen":"2026-01-22T09:43:26.281591Z","last_seen":"2026-01-26T07:43:48.681238Z","times_seen":229,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:02.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.C_rgEAoe.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5V07GMq1K5VWTA4gt4xKJw5WQ-eqZTrMgLDBb6rX31QFX8a3ZgXyZB3fJiBqOiQF7qh59yerxU\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\netag: \"1771376dc07da48b3f03339d86d57b7b\"\r\nx-goog-generation: 1769073977104806\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 193\r\nx-goog-hash: crc32c=C03sAA==, md5=F3E3bcB9pIs/AzOdhtV7ew==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-length: 193\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.6/customer/rtm/ws?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/rtm/ws?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +5HUEzT3F9QRVdg9IazR4Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: IhSZ3qBPQswQa9AL4KTBXWKKlwo=\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nDate: Thu, 22 Jan 2026 11:35:03 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T19:49:22.306397Z","times_seen":17748684,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":142,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/logo-branding-design-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:15.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/logo-branding-design-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15060\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:15 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZbB%2BdRGSVZEVXrKjQBrFPGVJfgu8gpvI3TswFeo93o9P1xcKx3trGBqqfuFTzyfRtgLaVhjx0MUaypqS5dNYjDoymkLr%2FQwp16aXmIr3Zev8Yw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf2eeb9a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3d0d3d727ff0d3b4ba3e126f8ed00bc","sha1":"76747d1cf368f020bfd86fc7479a2ab511379b8c","sha256":"22ec5de1f873870ee0f01200d4d97cad6dfcb6892f438aa96a7fcfcd56026abe","sha512":"12ee06063aa7d9596e2667c3b7ee98ef8155450baa61c74e325577734f3c913c7e46e39da859e48dc128e77a1fa7fcab8acd44413ea3baae2329fd95caffa0ae","ssdeep":"384:C15FS4mjGWhqerd0ly7U6n/pXU2gfuVe4i5lYbd7r:sevrrd0mhqqw5lEr","tlshash":"bd62c1957fca2d185ce1171e8c472e3729655fad0743d304413ea1c2a3d191a6b77f35","first_seen":"2026-01-22T11:35:33.060115Z","last_seen":"2026-01-22T11:35:33.060115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-designers.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-designers.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7450\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEMVC6jQTmu4Lra%2BbvyrJ6wzm5WxJQv6PBEMEh70BlEO5a8Gp9nXAaZdGJPz04OposmCWMfigTtY7rYHzJrrBKOiHEhVZ3O7IKZf1MkSV5hEEs0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf384d8d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f34e7494c618cf1a03ec0e02ff7bb91","sha1":"afba0be1ce6b9654c9c042b7bf26e0894d1a3898","sha256":"8bef8858e5000c80400f40c2b448e12bb652a695057788e7b6951e1252c98785","sha512":"7310fbfb8e1f3042c9916544b21a79d6eebb6119133b83552a4f66edfba9e586d0de21beffc23ba87c3dfb50e25c9eb9c16120bc4679d7b9bd72f21c6a15c11b","ssdeep":"192:DTZlPL//MZweG6C9tNZ4XOOkqTZFDjC5SS6tdbXm:hp/MZweG6mf4NksZF3Ccm","tlshash":"eae1bf632d0ed10eb6bf81de668323602c21e8ecc227e9393d84416010b6a6276f6369","first_seen":"2026-01-22T11:35:33.062076Z","last_seen":"2026-01-22T11:35:33.062076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-developers-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-developers-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1476\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGkGoZRb4TZGwteH%2BGuil8NJmYNUZmyBGKRRvj4c%2FIv3PCgW5Yj155i1JOxrElrIWVvDWcc%2FZp5bu4U7Q4E%2F9Hw%2BbA0BcFc61nsjM6Q5KvPfU%2FM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf385d8e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2332dde4f4e9000561ad064b92bde3bb","sha1":"db098f0624aacdaa399d2e2721292ce369e4c459","sha256":"32d537269e1e00f373401ee161cc5cea36b5cc42065f2ae8c2c776bb9bcbf886","sha512":"a7203e2d21c1d1224f440025487053325ff182b6db2a69454e3e0834f870e3bc5fa40d6fc213279ef145fb7622be799622c33dcd54c1ec5bd196007d568fbafa","ssdeep":"","tlshash":"a4311ccb1f8533559f1955913bd0a5523c23da4620e11f5184ac7dc9263c5383907e41","first_seen":"2026-01-22T11:35:33.063918Z","last_seen":"2026-01-22T11:35:33.063918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/the-turn-group-logo-mobile.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/the-turn-group-logo-mobile.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 4433\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dz1xUXkKKt7ONsXPgiYHY6otjIbX8ozhEmuOjMYqAvIbaGgw7rBIFq%2FTWXPyiJcHV%2B22lnL7DqDSSRX1O72bmN%2B9Wz4b2PXKRBvQcgSIznpR4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed99d3823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 267 x 70, 8-bit colormap, non-interlaced","md5":"f58f33b819b25aaf9873eca129b83044","sha1":"3b6a2232266ec18cf7f51a8dc1edf3e71abe6952","sha256":"c6b240667f37f0e5847780579aefc8dd2481f24b88143c2d2e2293abaa3262e6","sha512":"f1bec254bb854ac7505655446e522daaa1a05e2a8d75e456d5343bdf07e9fc3866c29276013df41693c35c8581fa923cd1ad04a00eade4930ccd78913d931314","ssdeep":"96:OMD1IH0fPqvp7Ziak5GuAtdVVXY0o5x25pGs39NDj+jw:OCCUfPqVjLnXY0o5x250o9Nvcw","tlshash":"5f91af82d2a91de0f53744cb23313f85ae89a3b75b7e26834e4d781f387a831b351481","first_seen":"2025-12-20T03:33:37.856861Z","last_seen":"2026-01-22T11:35:33.065601Z","times_seen":3,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/laravel.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:12.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/laravel.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 7724\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:12 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JByiSF1Nyhd4HmlisG%2FyVq6cirBe24wyf9MHYurJ3egNksR1DlkQr3k9y9Nm3Gm1lE2Qs1snV2ZTulI43hxW2T1o6sRoJv7z5WoMZvO23a9PDJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf1d590923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"c59f0c834526db32703ea33f9fb06957","sha1":"1223b70950e13ddb41071d0c8a02397ccc9f5dcd","sha256":"5c2c2b12d391899349be97d49d97e0d732cc58c96dec60e2e3627418fb291237","sha512":"0521330d48689b111beba64ffe4c8b4deef4f9fff5628888b1cdb2ec9319d58ceea3a65ea384196239f85dd9168d2c5ac2a6e49df859ead933c9f9027875d868","ssdeep":"192:bSEVknEiv9NVYdt9IwhAvWdDx/Ck3B7J56p37:OEmnE49zitWuNxHR9IL","tlshash":"07f1f84b2e66ed61450c7a09d6fc6049e3f75fc45d10910d9ea9c8030ea1ce9cec9ae7","first_seen":"2026-01-22T11:35:33.067343Z","last_seen":"2026-01-22T11:35:33.067343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/alert.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/alert.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 560\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vo6qSDSzMdcBFYUe3npWH7cwqxEhDbWAm7Hoqvmty%2FQpa%2FEjKf77Lp8MxuZTphswrx5MD%2BOARH0DdslEMlLEKnfjgr1Nu4NRstJs%2BWAN4ns1TFg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3dc1723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (986)","md5":"0e1aa116d66210cbdef644d94ed4c10c","sha1":"3f8a7eb4d3d0ce9d4872029811e0d9d9739cb5ff","sha256":"b5ad0cfa6f6b342f30004352f0a950e40d6edcc78a7397534aa9d8debf745eef","sha512":"28b3ad02641e8b08af9884814dd666db99068fbbddf5c9debae669749815f364fc4b50ea8ec2d2670c76934f8b96cfa64fc0273b6902f5a20e01fa49a8f1730b","ssdeep":"","tlshash":"d111500db30055b48afe449e6237b3caf0244454252a09ac70ac29efdab4ac37177eb0","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.840827Z","times_seen":498,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/offcanvas.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/offcanvas.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1476\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLz0t2SNGIdC8R9hM5I9SzhPeWjjORvRU03V3CfF2NH1tllDOlMOF9WmYk6BOzZx8YYWh%2BahhpIAuT7dv3bNpKY1PnOI8w9AEpcYMP4BO9QmYR0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c2023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3552,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3551)","md5":"bc20e6d8a96cddf3b27fd9a15e3bda37","sha1":"fd785f696254979085221d5b51a3e40bc98c2033","sha256":"bd405d7fb9cab4ce3f08f1aa60a5d8e045c942c4a61b387035f00dbd48d5b696","sha512":"6ddbe3963c21430c8f252ffb02e3fa9ff4c39ca2c6ea098cb72d3f5ddbc54523deda8ad851d3db0d4bfb2c894f5696a820d841005e34a6c31c9ded20ffec3a38","ssdeep":"","tlshash":"2d710f0a33d968b29ecd84b29232578bf30c5d95b605461cb46c5eed5b3c88771379b8","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.87659Z","times_seen":497,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/popper.min.js?5.3.0","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/popper.min.js?5.3.0 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/media/vendor/bootstrap/js/popover.min.js?5.3.2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7845\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TjOA5hvO0sNDofYYfP%2FQ3ADbEkOspcl%2FvoPxUfEFGwOz1BF8xpo3JKEqpXQU4PovssCOLm35u1zkI9EHsdAnmXtkoZ4vMUBI9%2FXZl0fvDV1Wlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed67c8a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20635,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20634)","md5":"fc091b6667e39bcefecdcd559f683daa","sha1":"7b431fc4c2b985e46fb1608134452733c42ace70","sha256":"f534a736511d57e6673f4751edef892b97c95f0c609d22da3ba31d495c2fa0e6","sha512":"6dc8aaaf9096d5d235ff762a9a397b46572033927697a7cb22df765df8c6982d3514955348ba6cf6820719097cc1a67c035d6f26e74c39e34a77998f33f1a96b","ssdeep":"384:opgIG9Nb2Qt42DGdngpc4j1WMYLUNfzw3UkJsnH3FsMfMHHTmasMo4SPkwlYJa:oiIG9Nb2+42DGdngpI20kZDMHHSP4SP7","tlshash":"2392d7883994f0b6436f92ba807f411eb2336930514ee100b255d6dd2c74ebaa66fd7e","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.858523Z","times_seen":899,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.9l_4saF0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:02.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.9l_4saF0.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WjjxyVFzMquCWzMrclE-WQsTV3nGbMAvXwArNr7b5z8CVnvUCM3ViBpDwEDYYD31KuLW_HLBeL4h2baA\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\nx-goog-generation: 1769073977133178\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 138434\r\nx-goog-hash: crc32c=EOAaGA==, md5=apN/PD++BV+BCzdxu1KttA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-length: 43571\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":138434,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48031)","md5":"6a937f3c3fbe055f810b3771bb52adb4","sha1":"3fc9e267c68bf9fe61061094ece6c5b55e427c31","sha256":"a14d0cf85c8cac0126953ede5c48b468192a03e5ac781836c80f87e213dd9c89","sha512":"95503a99fe3d28c1d207d8fa43aa865030db00b5e510b9045cf58adaf0159f4eb6e649743c7317d2bf627d5005df6eaf88aca8dc181fa82572f6a0c2fd4e3714","ssdeep":"1536:9gZQTNE+6WzvhFCvB0Hx6J+vXlKAwTwH7nDPWnYlkChX8qg4JklHYD8P:9gKTNETWzvhFCp0UcDOnA5sFikRYD8P","tlshash":"71d3f8e83996f5626bf312b700af1817733c192b280c4960a211fdddb5b845ea17bf9d","first_seen":"2026-01-15T11:15:36.914645Z","last_seen":"2026-01-28T07:34:27.663347Z","times_seen":945,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.B0_QvnEW.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.B0_QvnEW.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5W8rs2oHWuPzsoPrp2nOPNTPUgT0Mv6DNOyN-ucf9rLiMg9W_-W5y5M9b4M-RQuz0Ba\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\netag: \"bb2424b90285d46f921f699e7b3d17d5\"\r\nx-goog-generation: 1769073977112359\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 886\r\nx-goog-hash: crc32c=LRbwvg==, md5=uyQkuQKF1G+SH2meez0X1Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-length: 886\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":886,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"bb2424b90285d46f921f699e7b3d17d5","sha1":"412e217bd4cfbafc553fc36b9094d0ece147a429","sha256":"2b1840010c419cf6839e4a18ffd0eec542b4c0d0c49ce5606bf93639afda5ff5","sha512":"f283f440d13fb69e25c115fd3e9dcab60cf937ed1ad964644f9719abba510e9f99ac82747ef2aba6991de08cbe10a8965c0d352c380dfa471d2b6753beba021f","ssdeep":"","tlshash":"a41100d93cc3d8b0d73bd4cc52a899e6d43c0e88a8fd41c0e4f86e853b155b18236ea8","first_seen":"2025-11-05T08:48:35.692413Z","last_seen":"2026-02-25T11:20:48.331177Z","times_seen":7795,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-solutions-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:17.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-solutions-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2474\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:17 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQDVGISctVWNzk8T7Z3w7EidMMhg%2B7xSzhHFXr6wvn%2FL1MX9ob5Va%2FZNJcz50QKUHr6eu4oLd7fLsvfLUMod%2F59MMQmBtibti3lQD7cZe2QALnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf3c8e2023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03ac91742ef5cba803c6848297719222","sha1":"a24ae1070a854bdffce488405413cdb3a6b8fde5","sha256":"d0680265b726f344297730282f7bd74a7eda2ce8b33a5c2735c24af1a0abf2fd","sha512":"23a4eeb09d184c4a134dfbae743db754c63f0aede5bc7fefa9d156f099c4536be47371f89a64f32388f19fe27cee55781ef40e9fd155fde656944756123b9a02","ssdeep":"","tlshash":"85512af50ac6f448d5d1185c19ebba837acaf499160804d93269167c58ee889632faa8","first_seen":"2026-01-22T11:35:33.073705Z","last_seen":"2026-01-22T11:35:33.073705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/components/com_sppagebuilder/assets/webfonts/fa-regular-400-6.woff2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/webfonts/fa-regular-400-6.woff2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/components/com_sppagebuilder/assets/css/font-awesome-6.min.css?032af75ad5933f9f9a025db2a15c10bb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25464\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sun, 17 Aug 2025 14:27:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJpGosgnxu76WC4f3V8IH6GFysfY56EPscrI8ozysafuEzDUTjSYcKcA04VmFkspBOgJGMtlHx%2BaIlyRWPMJpRP0Z%2F23saEBER2sZDp48yv%2F97s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed72cb423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25464, version 774.256","md5":"2d89b49ac28614e9ccd9c81308b5120c","sha1":"46e272db3db1072791628679bc469112c8e41017","sha256":"c732f106e91bc618767fbac8e2c7b27e5c736d477b2bb4fb83f597a43198c33c","sha512":"ea52d931fe445178877aa558f6c7702b6f5836a938d51809605317f8c690356022745d4495aae3ea7018e8314a5e4c583fc58b28dded6309a2e1c37a89160bb7","ssdeep":"384:47kVrsDbxAmlq9YVDlI4zwZ0HupU6LnbbPT78/MktAxlkAhxA+iQ4QE8w:aCrsHxll7l4pPTnhjmI4QM","tlshash":"19b2e1bdb1ff69e474742512c5f42129760fe59aef31cb2a34a0e676f2460d826dc1b0","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-08-06T20:10:53.887603Z","times_seen":4407,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/custom-website-design.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:10.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/custom-website-design.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 87214\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apZ1m%2F3vJynLkeA6lsKnMbYwE07rBwXE%2BEAlN82mP3MfSwO6gsJAra7bcRHQg7vZ2HckaCnrOfMttp%2F0aSDlDdzUxk3HXlQt2oiaSPG2VbndSFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf15afdb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 490, 8-bit colormap, non-interlaced","md5":"cf155f8bb0ef5dbd9755ee2b5daf5542","sha1":"913481ac718d62defce9f734bb410bb2f7f749e1","sha256":"a491e5d45a5c353f467042a848722b1f5a769fec2f757430c8a1c2fc3b2e1160","sha512":"92a46187420dd79a3b0685c6c6fca0dfda0a175062e8e67aa14b5574beb8dad1cfaf97660962516cd5b782ce49f35494d7442b457e13b28ed195fee05d40c2b5","ssdeep":"1536:Dm2wW4WQfhKDcDAyYFmUf1YV/vtyzLN88hIL8if38gggWs1kNy/xTwVY8ZkyreuT:vJnQfhaB9YV/lyPzhIJP8+1Ay5kVBZpP","tlshash":"4e8302ef97d779f6af0c0f428635b47412a0f58dc024ceee4962b0c09b96ed939c5989","first_seen":"2026-01-22T11:35:33.075986Z","last_seen":"2026-01-22T11:35:33.075986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/bigcommerce.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/bigcommerce.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 6791\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHkY21Vg6XZabeYU0nJg%2B%2BtqvCJ%2FSRGNJoIKtFZhS2GnC1205QUarEqSbMip1%2BOznq%2FPU6Kif9OI7toegPTWGzeJV79RmaGEdQGo3PTr4y1bvYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf1a088f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"881a31d784469a0ba8fc5316cbae24b3","sha1":"246c6cc2b131824b95510b3950c6734d2119dd38","sha256":"c81c7ec10a341c5b2eb18650ebead72b55828dc06a6d8f9d1e2dac4a8692952b","sha512":"b168bf97c76f9cac6522e591a50b4765483c26da60e6b1192fec2815db6c84bd6ee926d79daec6d916ddee7cd56c9247e2219e6edaf6b53e6cdb97bc9d0f845c","ssdeep":"192:bSoVknv1jVid9N/Ydt9h+DrmI49Bavm3hpWq:OomnNjVy9Vit7+uDUvEOq","tlshash":"62e1e80dbea5ec00885d764a5beca091e7e71fc44da0900d9fe88a475c62cf8ced95db","first_seen":"2026-01-22T11:35:33.077595Z","last_seen":"2026-01-22T11:35:33.077595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-migration-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:15.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-migration-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8582\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:15 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgewXREptREA71PeaDeZ67TfX%2FJI%2BRMTJjP0FqqqprYaCkNGCCpohP6lKBNEzxWEllj3MvEB2IoL7HjwKw5M9L%2B4mQ2Kyt%2F10yAjihNNRrNzklY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf323c4323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c985ddd0d9ee534489f58b34629878b","sha1":"39b6b0d5033150472e3e2a9ea91fc7c8dfb75915","sha256":"850a2312f5197c484f804404fd3df9bb7caec28a9ab342468face53f7c75e227","sha512":"02da2ec615a0597c18fefaebb02b1a66f68f7566b7b57daffd7a25c36d733e3ee6945d23708073ba40bc22819bdeeb6bde512508e9be6795e3c147dcf23ec333","ssdeep":"192:V3AuV5uyi0CYcFLW/V5D3vWyro91YDGdmmxy:VQuV5lpC2/5M1Y6dmqy","tlshash":"fb02b0a557f591e0fe370d8bdc4914c9d15cdcb20b53b447ba2a9006d14904be79b2f7","first_seen":"2026-01-22T11:35:33.080182Z","last_seen":"2026-01-22T11:35:33.080182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/button.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/button.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 452\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1BLvkqCkAWRF9Em6QE5BcGQ0qNEzWws7uLQ7FEPNa03FYiuulAe3mrf32XIgQNuVd6CbIJcVsySt4yo%2F5H2wBDD6Elo7X4yAaIFQPK%2BYq6k7tQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3dc1823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":787,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (786)","md5":"54f4809bf0210289d5b74eda25e1f5ef","sha1":"a5116b31eea12569a373bca817518225de621d0a","sha256":"ab2d8e0096d69b602f5d18fccf8796214bfe6891ac699474c8a71692ff9ce746","sha512":"d507c5de730b9c2c3e1b9aa0376b6ae913c9c842d9b0e5187f682550c37448be1456f493f8b55aecfa3e97948dc1e250afc78f9bbad56e2f89254e7b07b3eb0a","ssdeep":"","tlshash":"5801fd8ab305a1f78266524c322736daf196c899a021006c3a2c9cc77f4a4c735be6f5","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.924776Z","times_seen":496,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/tippy.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/foundry/scripts/vendor/tippy.min.js?7e64b8be04f0d43879fadc7326fad717=1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 10042\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:10:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yn9SSYWMI2Nion959oGIyuPkudUk3tlPN1DYdjo7X%2B0fTescUlP1OAc8MtKCs0oF%2BDz2rEyGfYGWBJiH22jkwizpGM8NrYP%2BBHLqvOuvjkrROhQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebedbcda823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28167,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28162), with no line terminators","md5":"966f09c0bda0c5b9893f3e669bf57673","sha1":"b647fcd8f6988d6dc0000492021fe5eae9388a80","sha256":"b06b2f363cae8651f0def3fe9c97747c154dd7a1c8dfb5421650a3babc5332c0","sha512":"61fc10f32586ce849dce928cd3183e216f155952312a81841331d3f758af9aa75b791248e8911a5dfa557503b8a08cec200fee84826205c7ff3964a3355d05cb","ssdeep":"768:mCX5FlxneM+eAD5pKmib2ifQvDduwP2r+/54ORgLj23pRGdkoaFUmGuPPo:LzjOP2QRIjdo2","tlshash":"56c2e78af69170791b6751b2c06fa71ab23b216d244f8520f477e0c93c78dac52abf1d","first_seen":"2023-04-06T22:43:16Z","last_seen":"2026-07-28T18:47:55.286627Z","times_seen":138,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5U1rbtFmIGcoQAgORui-eJG42cmQFEdrtdYcu1RyL1blutkC5CFsP8qncKQuJEpPheN\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1769073977042059\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:03 GMT\r\ndate: Thu, 22 Jan 2026 11:35:03 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-04T17:33:10.203066Z","times_seen":16397,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/custom-website-development.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:10.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/custom-website-development.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 92315\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUMGOg0Vq4LTbKGdZmwIvZSV408P9zzGOBGcbp5Ig%2BefzyGLOpewcdcW3E95H5L%2Bpi3RagsVhlLGhnNT%2FsKhx7MY5SDI4uTZMgGS5yLNTHqMOek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf15afdc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 490, 8-bit colormap, non-interlaced","md5":"bd7fcd4b97195ac527d2375e8f336caa","sha1":"e31ff50dac585603e1a3440d292effce6cc2854b","sha256":"0f52069bbab068183ec5e44e841508a69e1db02df3679c85a3fc9a50485701bc","sha512":"bf3fd188180bad6f4ad245447bd7d61725bc5459e6772baa1810e58d0144bd1b7a5fd7b37bace70e1234b6da858077f9b82a776498a19c95ccf7a1061f60d5b6","ssdeep":"1536:wu6UeL83HSSdiy9rKT8uoaPmtVVX1HvVP5X2J6sc+9kHVGWiRMoUZA/zmZ6/egOj:IA3HPdFrK8uoaOTzX2J6++H09SU/nO9V","tlshash":"a29302a9ec81553d32783278ccb12e1d260feb04b4f045abd3b7551a9969563f0bd3a3","first_seen":"2026-01-22T11:35:33.084579Z","last_seen":"2026-01-22T11:35:33.084579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/magento.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/magento.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5982\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BFn6T1Yfccgf9PX%2Ba3E9%2BjDs46sFw8j1KlXAfd0kPQHpSNFqSjG5Xec085kKX%2FPAXgiLVl2E%2FrmqHmjKGX%2FyqB%2FNZnf2jeOUCSYpHwAxUpmpnI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf19f88923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"e728423d4bb9905c7f757ffeb9821aaf","sha1":"506b008fbf9a711453a9f18ee8814fcff81096b9","sha256":"9cc74baf5e6358e54bd44a503035020ea601bef0b67049f3ec2c66cf9d9750d6","sha512":"94036f5e17835ebe592f42a2dc2135d08b9c4ce9fdc98134be255d4c5352a0bfca9c7686a00fd65226f379aa79b8b3246f32d65c8ce594a1dd3573023651cca1","ssdeep":"96:bSRQWlknNrzEAhHCitHdNG0Tt9dzGprKHxFZWg6g3dK0iJArM+rjI1IJvWPRBXIa:bSRVkn3ia9vt9uK55dsAr1jI1h5BUWD/","tlshash":"9ec14c28bb95ec315188b9143ffce2545b7b57d08d70642d6ce9488a4c714b8cec668b","first_seen":"2026-01-22T11:35:33.086748Z","last_seen":"2026-01-22T11:35:33.086748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/codeignitor.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/codeignitor.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7400\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2ktg2XH4711V2Q7IrSu62Tbm8afVuL4LUWKinNC%2BfRmrSzlN%2FNGfQ4sjv9lhe%2BZmtl5%2BXeZnXbhTVm4vyKW2Min2ZexGRZ%2FqtfgGy5J4Bz2oQ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf1a088b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"4154e16679be32a710dbf7fb29a1d2a6","sha1":"c95b0a7d5bf185c76668d002adaae491a360aa55","sha256":"7626cf7b463386dc6168109a9f1c19c2604f1ededbb779904a2562e747567d48","sha512":"f6df1f566404f8d8b00cc941fcd7872c1315dba2ae2032e86b32f7c41cae15216a721316fcd62adfb319cb4f631ec0a6c6a685d10fdf669a5828568846ad7f71","ssdeep":"192:bSzVknK4iw9Rdt9oH/aoF6O8fsTA8VgJIdPK/ZSjGf:OzmnN39Pta/aoF7G27dOf","tlshash":"07e14b0fbeb18c2018bdba44a4fc608257e707c1cda0861adedc898b5c516b8ced95d3","first_seen":"2026-01-22T11:35:33.088866Z","last_seen":"2026-01-22T11:35:33.088866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/drupal.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:14.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/drupal.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6126\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:14 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5hIcU8PElN%2BLLImt7eqJviTqMRb7oG1XLF6COW5vzEnpkd%2FkO%2BFpEl9tRmbUT4HCWcUxknmqB5CzP1UPum5Jm677phhxX8H39hAj%2BlvQwrth9I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf2c5b2a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"5ba30c56e7ff87c4272e6c14586ded27","sha1":"540c5a7457f79989ac3700818a0efff1dd06a154","sha256":"27fe062a605ebceef6f6b927b09cef2469a0c93613b11b06d38e4da1b61ff50e","sha512":"52aa6a82280e90e02aec74e82fcdc8c06765253fce096567d76f284d3d19d6df367a09ee1996b049926416fa4453b2d039b505cd81a59d171260ae88a622ca2d","ssdeep":"96:bSHQWlknNrE+lHCmHdNG0hwH8jD1dt9dzGp4aBFRS6qXS4uktN4WqzuDcP6lDZZJ:bSHVknRim9Ddt9X6qi4ubzujTYJb2PXB","tlshash":"ecc13b4d6ea1dc506a5d695835fc6485e7f70bc19c506069bff88a934cf19e4ccd80c7","first_seen":"2026-01-22T11:35:33.090889Z","last_seen":"2026-01-22T11:35:33.090889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-designers-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:17.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-designers-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7740\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:17 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGXMY9MoslNEXymw4AAs6jWYT7NPKNge6efJWHsPy0qVr63WF%2FaWsfP0M86QGC5JDEYUP62NzY%2FWSWnI5UUC%2FG8UaP8tU5OOGvN7Ec2vg1%2FE8hk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf3c9e2723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78c7b59877b16387a376824ea41f511a","sha1":"9d256da1e4fa19c43a38ba1d798d90ee2dc4b52a","sha256":"feb1b8d6b99f1d2cceaaec62bb20e49fa276a76facd8bd49356fa96ca400c404","sha512":"c005980ac6e9f493f12632f74801532900ef8938c7ebd998bd04934c6d096c7b2faf2fefcc313a18ef235c51525697a82ab4d1e635c65a5e704abfa033a5f3fa","ssdeep":"192:WC4tSBFPqvfwoQXyQUqHoLwGSCmZaPtOfyf1Ho/:d4tQPkfwUQUqILDptPAfeHu","tlshash":"b2f1bf7a0b24702e9b9a285c448cd4474c662e42fed50f42fc88dd46d77396899fbbcc","first_seen":"2026-01-22T11:35:33.093039Z","last_seen":"2026-01-22T11:35:33.093039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_jchoptimize/cache/js/e020fc130dce7e8d0a14c73a54456c21c8e2925952dfd8f529b12dd50bad9574.js","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/com_jchoptimize/cache/js/e020fc130dce7e8d0a14c73a54456c21c8e2925952dfd8f529b12dd50bad9574.js HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 108315\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Thu, 22 Jan 2026 10:52:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pu9k946QSZcG3VqxJqyL6MgGSA7455A2QaXl7b679fEwb3qLsLv4iopn4wHNEiqcSReVpnJlRIKAHSnOx3dgjK4UIgOw4Msii%2F7TWs27kK5UuLc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3cc1523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":360974,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (38864)","md5":"523425953a77495b05b8b8ad5ad6ce10","sha1":"3f7b818468cc6f48b6e0460e23efb712eacc854e","sha256":"f1498d53c443c1e25e37b3e1ff6b2aa725fd27b2493db48fd46268709e30f696","sha512":"4378f505ff9f067650809f8e3a75341173a8d48df79c584e1d021fd814bff575d2d46795b384f42b433d529ac86bec6ae06ec7fa9c24ef69827de75ec205736f","ssdeep":"6144:E4UciOxaWTyQTLPCA3XVBvYzfu/4A1KRrF:DBa7QF3XVqfF","tlshash":"10742a9c7191707243eb31b551bf210eb2377929b80a8050f169d8e62dbce89a17bf7d","first_seen":"2026-01-22T11:35:33.095094Z","last_seen":"2026-01-22T11:35:33.095094Z","times_seen":1,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/videos/web-site-design-services.mp4","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/videos/web-site-design-services.mp4 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1828383\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Fri, 22 Aug 2025 17:39:58 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncontent-range: bytes 0-1828382/1828383\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKwIRzxtW1uzzXeTjCIutt8tPKXeE7eB7BjbDFFri7fguhn8CVU%2FIhv5%2F43r7YM%2B10yWZJ1%2BcgpOLnRoUvsPXEyjF3ITZMSUp1LoeReBD%2B6zHm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed47c3623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99912,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6673f604066fff05278f0df2180517e5","sha1":"768859289a1ec96d6563cd3c5e43df4a73a5a6b9","sha256":"85a4b747f1d1e3e450a8f06afd20949294a35b0a910e2543a1eb7f671ba894cd","sha512":"36186088e8011af8b84db2b35abf9f08b1952a3ba9f6647600abca0a50f7795c7d5020a1114bbbec530c845eaa7164f978aa8ed4295e6eddf115436d3f3340de","ssdeep":"1536:KEvmesayR4RLbOuLcIbifp4lI/Qa/sbYE6Hw4wbVDZiwWBIU6OTuITM27:KEvmesV4O7Bn/Sn6Q4iZiw5JY427","tlshash":"4ba37c4a27b5054bdab4537c64ebcb273334c421738747cbbb4473283e996a686713ea","first_seen":"2025-12-20T03:33:37.941249Z","last_seen":"2026-01-22T11:35:33.097284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LkxhNUidobXVK9mxMxpIdy9pWhIK81DC17%2FfRY%2FbwayehS614OZcWuAhzcKSx6rVYGcVJC5AlVQE32G1e2P9H967cKb4sROuvQOWM38sCTkLA4%3D\"}]}\r\npriority: u=4,i=?0\r\nexpires: Wed, 17 Aug 2005 00:00:00 GMT\r\nlast-modified: Thu, 22 Jan 2026 10:52:14 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncf-ray: 9c1ebed62c7823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":486645,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"292a05c3ccb2852997dfc61f0a4754aa","sha1":"bf845ff342e9f42984f2f57243d62b69098dc93a","sha256":"16aacb0110aa61ee853ce1d19f068969e274419b1bb3c8e2254683405d09efbd","sha512":"326acd2546067ef8e5b5b20afa5af6cc8bb563e5f6136f6d5c522729b3fd71f5f0e68a604ad77c702de10e0c695d474705ca748550abbe0fbc41bd83079435e9","ssdeep":"6144:QJZU9O976BiVQvR3pAtiaZeRz+yLKR9X95rKvtKVMKRtVRvGM4F9gbDPRPyb1LD3:QUuB98","tlshash":"0ca4d4332802607d4e2342d4f5d62dee735ae415e74b22e4adb6e1948fcab874233b5d","first_seen":"2026-01-22T11:35:33.100161Z","last_seen":"2026-01-22T11:35:33.100161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/presta.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/presta.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12571\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCRSSXp%2FqM8x13FpC63IXBUzbuzPnmt6jvStZXcbstR9PmZP1nD1n9MEOw2jXlm2IHEI7XMmoAEMT%2FXdsMU06wS2WtrYGAHph0MXG1Cr%2BnedyYc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf1a088d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"c8b65a596010c062aa41cf740d92dcb7","sha1":"6b11521e5ab04b6990120ecd18950e83ff6166f1","sha256":"fdd445cd83a4df25fde65202cf00172251653f025655cc36b93dc4c4b44ed1bb","sha512":"3c36d679c80cc4c9fd60642ec4fa3ec1ebe2cefdfae038ea488fe8f9ae688c6b0dfa9493c65b7cf51794637c9328bce169a8d8d4c0881772f441182cd01203dd","ssdeep":"192:bSCVkn3i497dt9DK4nEAyXno7Sv5Be4HQ/EVv5/h9xl0OoMVzOgYZFh/A/CmWigU:OCmn3f9BtlqkSv5BePWv5ZqMVOJhILgU","tlshash":"8a427f045e66ec208e8e3f1c45fc7896c7db4bc14eb1b409ae6989474d025eccde95e7","first_seen":"2026-01-22T11:35:33.102163Z","last_seen":"2026-01-22T11:35:33.102163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/woocommerce.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/woocommerce.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8654\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Atf5tLl2Dns2bCBSvqPwneE68AhbHIlJkrgEknwV4eNXnwW%2BAwh5IY9KmbzfOZtTo6Jp3vjnhicxLVAMOMR3qDxWLJDltuTLZWwc5vD3EqKKBSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf1a088e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"436009ebcceac6a9f8b8e472cd20d980","sha1":"290abc735f0bd7bdb19d11484681a41da1e5e4d3","sha256":"3ce07131c304fb3e8bd6f45b8fa27f1c327c155696c0effc5a8a0358dff869f4","sha512":"880ca6ce2f135f748bcb4edcb9c0ecde3c3eb8b89999023c90d9c24b0a146c1ca516e50914e756eedad9ff327c536e2865fe19562b8ac535c54363baee38fdff","ssdeep":"192:bSWVknBfsBiV9ydt9OQySSsqSP2oGT1Qfl0Hqc1Jv3I29MVu4xwL:OWmnBfsBW9stwQyS6s/GTuN8XJPIkMNS","tlshash":"b8026c2e6806fc201c1d76894beca181a3f71e909c65a00eee9d48130d519abced8ec7","first_seen":"2026-01-22T11:35:33.104209Z","last_seen":"2026-01-22T11:35:33.104209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-2588802-5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:14 GMT","end":"Mon, 23 Mar 2026 19:51:13 GMT"},"fingerprint":{"sha1":"3C:DC:21:26:F8:7A:33:10:B4:84:83:99:1D:39:5F:67:F9:30:F2:0D","sha256":"7E:B2:4C:28:28:AF:14:76:E2:EF:78:6A:09:B9:6E:FA:C5:87:B4:75:A2:86:A8:E1:C7:BD:AE:A1:73:A6:D6:5D"}}},"request":{"raw":"GET /gtag/js?id=UA-2588802-5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\nexpires: Thu, 22 Jan 2026 11:35:00 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 22 Jan 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 111680\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322109,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"c2a1e1396cfef64f658a1097dd9342d3","sha1":"0d76eedb7550269d6b3205eb53590a0c9ba89ed2","sha256":"9fc1f498a0bf551357beada11b5c7735944cc498a0db49d3d5a488dc08c56a56","sha512":"71620e8afda968be9cbceaa773f0f591ff049ae18514f6778a5aa120d3973ace4b5de4c4338651d392592bfb6cc9d0fe5cea294dec44591e7ea55629d3534930","ssdeep":"6144:LzXo/RsQAhJZEXkEsrzQ8Dgo3VLXgejIBKEH9ky:X4/CQAhJZEXkEjEIBN2y","tlshash":"6c6408cd73d6702693a3a478503f118bb17b6992f84cc895f186d8d42e70aaa4237f7d","first_seen":"2026-01-22T11:35:33.106033Z","last_seen":"2026-01-22T11:35:33.106033Z","times_seen":1,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":135,"dns":7,"connect":28,"send":0,"wait":49,"receive":31,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/components/com_sppagebuilder/assets/webfonts/fa-brands-400-6.woff2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/webfonts/fa-brands-400-6.woff2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/components/com_sppagebuilder/assets/css/font-awesome-6.min.css?032af75ad5933f9f9a025db2a15c10bb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118072\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sun, 17 Aug 2025 14:27:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSegpZQIRrkx4cFUT3hxNqCK4CkOzmRbM1iZAZYGTz020fPam%2BBDmGtXEpVzwTJbQLJVpyFK%2FZO9ueMYj7V%2BN%2FM0jPAHR%2BrHuq6JH6UHakUUKUg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed70cb023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118072,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118072, version 774.256","md5":"715d593456fa02fe72a008a72398f5be","sha1":"e948290773216dc1b50c2121314a8cf918c22b54","sha256":"c411f11975d26eb04cd2aa3c071181d4b18e489f1fb97060d4176a3531dfb36e","sha512":"1f63209c93a462c2690442c9cf1c3e5a67f2df7a67dfcda2cb81292a2dbb90641aa0ab81c25323a1f2d9f0fa09b3421d136ae5228c47e581c51912ba284de46e","ssdeep":"3072:3wqMZaMDlYfb+t0YI4WlLL7rE2ZjX+B+pdJpimtm:gpZNYfytUxH7rnZj+Szpiz","tlshash":"71b3137922e526408e9d0e3bbf7b6a6ec7f8719ddbd4c10aa7d18469001738ed8d842c","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-08-06T19:30:47.286916Z","times_seen":14237,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/shared.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/foundry/scripts/shared.min.js?7e64b8be04f0d43879fadc7326fad717=1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3015\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:10:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FQ9AP%2BGjcHlwhdNs%2B2MDKYy%2FyRBqIXgs3oksxtwYH8pkAW0JKPNgDRTsFEOrKwxqo66B%2FlcbfcuQNlEKwVlTbKPY7L%2BPfIB4FDsqeIF01VlAPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed99d3b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9882,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9882), with no line terminators","md5":"5fd56e06f41395a58f3477c6be760699","sha1":"29bef81008420450816e05364db13fef89689e03","sha256":"6c5e6ea20da2c40d92d4f9619bb88ad88a6f7c492343159dd4a5cb339f548cf4","sha512":"5852c299451acf72b2be6e5d07e3f56dedbcf4819fb16a87c3a6dccaaa54a610df156bff0a2c931dfc3d4ca7adf0b8dff6090d7ac69ff197c3911e6843295f30","ssdeep":"192:M4UYVGAx7VS7Y/3LfUptUT4Y+t+PxjBj0pPfGPBg6xfzer/GX32/DaD4HhkxW5pi:MbGGAx7VS8AUT4Y+sPxjBj8PePBg6xfF","tlshash":"15128468716460b12fff56a0d4ead90266233839620740d0709b98fd2bbde8675e2f3d","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.271144Z","times_seen":133,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407700\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-06T19:49:38.936749Z","times_seen":957385,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":71,"dns":1,"connect":8,"send":0,"wait":8,"receive":9,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/scrollspy.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/scrollspy.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1736\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pv75FO1gtz%2BePppkk815jtZHGZ2VQX9nYIx%2FvG6IfNs3yQwiyGjimv7OhYCWPQ7rQ675Nb6bmX4MMe5GWjU1uetAGTRsv5oi6VfC3bO00mudepg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c2123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4096,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4095)","md5":"f6d1a094c1f6df226b2c85e0ecb0412a","sha1":"46d6f1e9343396a458789dd8739e492ca3a4a439","sha256":"72dfca876a94bf1092bf2046ad7f8200ec917e7a1edca73e2049b740586b2e80","sha512":"01b5393aa928f8c7b408ef491401bb8e79fcd44572fd72155d4a5452d53f239cbb7fe96194625cdb986f16df5e45e645874a29ccb3a6d954e2d40809471196a3","ssdeep":"","tlshash":"8b817706728065ba41ceca8d813b4347f3291cd57346d4bcb93c7cde1369fa279626b5","first_seen":"2023-12-04T02:56:41Z","last_seen":"2026-08-06T11:08:36.854207Z","times_seen":495,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XIMzCb_vBJ4j6v-dAyJgZUJBw4WcnJgk6tHtZbabPpRRTLQ-VUFHVD8cos7pnOmFJu\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\nx-goog-generation: 1769073977197739\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 98905\r\nx-goog-hash: crc32c=8cJe7w==, md5=Yvwwq4l6JvSjt0pE+VkRTA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 32085\r\ncache-control: public, max-age=28800\r\nexpires: Thu, 22 Jan 2026 19:35:01 GMT\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":98905,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"62fc30ab897a26f4a3b74a44f959114c","sha1":"a189d720dc8667e76de4fc472ebb5ea1419a45e3","sha256":"365f752c4412443002ea5c2f7f7a32bc5301d43f70f35623b9e7ea67dc94f162","sha512":"dfe0d8d6d25cd0a8f82c64203db42740d303f9e4e9e775351e5a60f6f5df4a38c3355f1a63c03f43bad6a0537a42afd819c80b8ca13c1f72a5774773fc7207eb","ssdeep":"1536:EnC9o5ri/D+iQNPcDYbeyzB8SP1gaGwp78RtKnBM/0H7s:EC9o5u/Cazyz9PuG5B3HQ","tlshash":"32a34ada7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","first_seen":"2026-01-22T09:43:26.2827Z","last_seen":"2026-01-26T07:43:48.704058Z","times_seen":330,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":22,"dns":11,"connect":1,"send":0,"wait":3,"receive":8,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.BMVhEfih.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.BMVhEfih.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Xhd5q-t9WVAJhBUo_z5zWQFWMl4w-8yUSL__pypMdCzvPIlIumvMu44verSgxW1WW_\r\nx-goog-generation: 1769073977155888\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 217354\r\nx-goog-hash: crc32c=7ufeYg==, md5=Sa6wKSK1yKTObjxqjFf20Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\ncontent-length: 67117\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":217354,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36687)","md5":"49aeb02922b5c8a4ce6e3c6a8c57f6d1","sha1":"f7a789f2ad922f9de5cc36ae2f779b57b296fc52","sha256":"64cbdeb2792d301fc135b79d275c6b063891d427818883b17e424d6e86b77f57","sha512":"0b393e6e69f294f59be73b886cc88d8b44cc23c9c7cf0e5f7c3fc223b620a4b3964c2580e56b8e56eed4ff7cb4cd6190ba9606dd68895972958e9d2f5e837d31","ssdeep":"6144:Y/zuGOGB+feaQiLxXofpbXWQaP7JGaKkH3:MzuGOGB+5QiLxX8bXWQaP7JGaKq","tlshash":"09246cc4f18af43987eb34e6547e2002f63d6d18784c8564f798deb63da85899233f29","first_seen":"2026-01-22T09:43:26.346896Z","last_seen":"2026-01-28T07:34:27.680634Z","times_seen":470,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/cdn-cgi/rum?","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:03.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1029\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1029,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":882,\"startTime\":1769081699822,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"c84fbb7c-3ace-4c01-9c0d-4f40118f71bc\",\"location\":\"https://www.theturngroup.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1062,\"domContentLoadedEventStart\":1419,\"domContentLoadedEventEnd\":1427,\"domComplete\":3360,\"loadEventStart\":3360,\"loadEventEnd\":3364,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":24,\"domainLookupStart\":25,\"domainLookupEnd\":25,\"connectStart\":25,\"connectEnd\":49,\"secureConnectionStart\":28,\"requestStart\":49,\"responseStart\":337,\"responseEnd\":337,\"transferSize\":48300,\"encodedBodySize\":47365,\"decodedBodySize\":487143,\"name\":\"https://www.theturngroup.com/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":3364},\"siteToken\":\"8277fbd097724d48bfe3040493fe6fca\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.theturngroup.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22jJUkXVe9zC8PNhvD9n9o2kBu6LJHCFOFk18V%2BqXXz0%2Fk1MdbirRUawW4R8TuUWTE0EziBHzaAZb8UctPjb7On%2B5UotZKVr%2BxmMBgZmrNSnvl0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 22 Jan 2026 11:35:03 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c1ebee4ff4123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T19:49:22.306397Z","times_seen":17748684,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/showon.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/system/js/showon.min.js?0b6ee2b15d1812bf231ba577bb7488e3 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1360\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCK8G9cboT9IH%2BNdCyOnOBQUgNQsHlRXNV%2BIYLCu4y4AZZ8iRtvW6KOLzdSd%2BoNRYi3P6Xwkj7n9jUOZODBPjaLHiE%2F661eXKDMwPNvoxtmrIGo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c2b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3395)","md5":"89164626012583289d8c93073d7b67f7","sha1":"f79c256660e2c0ca2179cf7f3168ea8143e1af82","sha256":"c60abf7900b31bb3a6e46ba1f1823fb51d02998584ec59a7c5fdd1d992842d33","sha512":"f92248ae6ed47d846dcbed65d1811a816223601628bb51a27887cb374d2b486abcf548c6d49080390aed60272659dbca93fad0e82a4d7b933db3d8e4931bec84","ssdeep":"","tlshash":"917151e66278193285b583f4a9a8cac33b32be11ed47449cff1d8cf39724d816c96479","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.892605Z","times_seen":414,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=11648703\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.theturngroup.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__udh505wf1zc","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=11648703\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.theturngroup.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__udh505wf1zc HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://www.theturngroup.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://www.theturngroup.com/\r\ncontent-length: 362\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":362,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (362), with no line terminators","md5":"a22d4207012af9e0179549b0953c362a","sha1":"c0745a5593e47179bfd10855155422d9711a0a22","sha256":"442ccb1430111d71f8085e537b3f9f05b882978359e238e3779155799442b002","sha512":"322e9862eb043d930253f34cadf09b71e366f5083f680b1f853dd33d7947f2002d30a1f1235913d5044df397b0991b7fa75c5ff4419b7f855d711bc62a65a02f","ssdeep":"","tlshash":"55e0207eb50165729fe5f359e4217a81bd3467a1920534f8b49d1350811f69d4330947","first_seen":"2026-01-22T11:35:33.112698Z","last_seen":"2026-01-22T11:35:33.112698Z","times_seen":1,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026version=6bb83031e4f97736cbbada081b074fb6_d3a41bafbeed44fcad20ff491b0f7bfa\u0026language=en\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_localization?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026version=6bb83031e4f97736cbbada081b074fb6_d3a41bafbeed44fcad20ff491b0f7bfa\u0026language=en\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Thu, 22 Jan 2026 11:45:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-length: 4606\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13250,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (13238), with no line terminators","md5":"77948d729f670f7f921c99beaca6a4ad","sha1":"9ff354a2f6a0170a731a0b73da04f0c5559cdd58","sha256":"11d05e870053ad29979f5928e2e64f98a8bdd4592782c0dd170c7a40170a1946","sha512":"ac892c1bca6075aa3b668d25a838ba29b706db0098c74ef119180686d805ca62731eafd9d54761f1c42cc50dec9e260415f94ce3c2b0517bf25df461524939c0","ssdeep":"384:smaZMXVuHnRcC9riqHoKwpfi3z80CITo5J9sPw:NMHnxWfilCIToCPw","tlshash":"ca52c919cf526e7e07a365c6b48fba56f4a9409856900437fccc803c9364fca739fa99","first_seen":"2026-01-22T11:35:33.1144Z","last_seen":"2026-01-22T11:35:33.1144Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 20 Jan 2026 20:11:37 GMT\r\nexpires: Wed, 20 Jan 2027 20:11:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141805\r\nlast-modified: Tue, 18 Nov 2025 19:01:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44192, version 1.0","md5":"1c278435b6738e80614efd67b0aa1d75","sha1":"553a407dccbf2e476e53a88b9bd5c625c48d8f99","sha256":"9ec9eb9108f1752c30ba316606858d685a112a609d8bef1fb3d5d32c8e0b6507","sha512":"7b05bc06e51a460927d557deb8deea554c692b6edd381ed2e1e98daebb026b3de471c56278114f48a31c075d2dea30200acee2f2a804246bdfde61be1487f9ee","ssdeep":"768:dji8cRMN2W5RiThDSklZ8iD/ZbANTt4V7NIPuezvbzstqP+l7rx4HDgcq:dteE2WriTsOhzVMfTEqPI7rxkDPq","tlshash":"d113e17ba74b08c0638388b867367bedf5e5c0218b5c5ef85221f481f20d759a6d92b7","first_seen":"2025-01-09T01:43:24.38206Z","last_seen":"2026-08-06T20:09:57.877371Z","times_seen":39593,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.Bm2FYOkN.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:02.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.Bm2FYOkN.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XWqt8_kWkrNn0pYrWwuGaSbyjjKvWLpm2g6WE12JVTbUKbdATZZ7QqsmTroREY7Ci_uiifq5OwSrJiRg\r\nx-goog-generation: 1769073976999082\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 53813\r\nx-goog-hash: crc32c=SomvOA==, md5=/wd1eEtquBjSkPc2Vtb6nA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\ncontent-length: 19494\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":53813,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36662)","md5":"ff0775784b6ab818d290f73656d6fa9c","sha1":"cc7313814ea8cb8d8f16867692f29dc2a6bb5dcc","sha256":"819ad19d2c108a47d50b19f2500a4e80e3cd463c7e4bce1c9ebe6aea6701cd1f","sha512":"1c44d7e297f9e5ac37008b538368b8b277e1d2b2c6a5cd359fcdfbb5fa96020ebf66440782c4d84a5e27990504f4486a307ef35a76f0ad61dbb67d3d21a2e8c9","ssdeep":"1536:4uMq4Z7S/IvrhtxyVdUB+Kogm1kcZV3vtwczo:x07tDhIaBXm1pZVfpk","tlshash":"64335dcef141753157e311f2b07fa006b636292c384c81b0f629dd9925ee44ba26bfad","first_seen":"2026-01-22T09:43:26.415405Z","last_seen":"2026-01-26T07:43:48.592978Z","times_seen":229,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-development-company.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-development-company.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81876\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 09 Nov 2024 17:16:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnuFdJXLn7FrMswNNoFMv2OjGTN068Zq7eyASSf4CRM4POBhJdpRe2LjfU9mC9DT669WHRNZgA7Oo7OG6WnOCsq9sUPy7vblKPjguPrAU9XV9Ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf35acd723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":81876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7677d216d37fd7b50a21bb784c3b9ee","sha1":"2abf4912e8bb7b93bda52a7516494c3c4495c55a","sha256":"e778502b5cf8e94434b2059b0c76f7b4155593adf9d9b56872ab64aaed801cdc","sha512":"3062336a98ed87da8d1cebb543049ac6a4de08fc63e7229595d4ff97ee78a136a69650a0998381bb25d2d426aaf07992c102bf7f7ecc704df07ae86c2f9c909b","ssdeep":"1536:vwdZyfIra9GmcURhBadkt1I6Hx1QCwuVrQ8fUSv85wuJm/RggxG:vwLS1cURzR1Iix1rVT8S0ZOG","tlshash":"b883021e277c3042859c9a360a6a2dc20d7edc8e448535ea3faf813e7cc56a6870f61d","first_seen":"2026-01-22T11:35:33.117593Z","last_seen":"2026-01-22T11:35:33.117593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/core.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/system/js/core.min.js?0b6ee2b15d1812bf231ba577bb7488e3 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3132\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0yEi5QaX5i4GdO%2BpVHKsz%2BC2Yclvi5rfm21UnLqx18EQqXx1K7Tu8O0sv%2Be3MZzrNc7SSXwo1u4EwGFo9gVD3fru8XeTSlcoGNM6PXryxl%2FaC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3bc1123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7662,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6736)","md5":"7fb4f4ee5adaf0a36ff6dd4c2466374b","sha1":"37ffe4186289eba9c5df81bea44080aff77b9684","sha256":"9c0b2e2bdefaaa94497515528c1b59b76d65533c4c7bb2c6896727d2511fa7a4","sha512":"c697858691f538bc8be3cde01df46f5fefd2a034e3c460b67b7da1f79e077e1d97a9d73343959c49e3a6d2b8af1e1de828ce3fb10e934cbd45ec7eac6352b5ed","ssdeep":"192:d6RgsS1FvAD4qUyQZWKfH/rQVmDJJRznWy8X0Gb9DGYF5tF1hZ8ZaZs:d66sS1JAD4ok/rQVmDDRznWy8EGbFFT6","tlshash":"d0f1d9e72865433186e8d3ed94805718b437a311b83f4420e458bdfb7f55d02e96fda8","first_seen":"2024-08-26T03:12:55Z","last_seen":"2026-08-06T16:48:52.406042Z","times_seen":884,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/dropdown.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/dropdown.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2436\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEDUIOxvsSZ8%2BaaFUScuupNeQ%2BaqTqLzxdT0QVw0SLrIEQqePwkyqZI%2FgTj%2FUMOepAR%2FbNLyZKI38Pk73F1CK%2BTBcSgOue4cD9c2AwXlUyVVRMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c1d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6219)","md5":"249b0b529fa57e14d4f6758a1e6af1d9","sha1":"4639ff5a865aef2883b6293db643987edea01521","sha256":"ab9b6fb6e9491507f98fd4c081b9c3213664d446d51168d2bfb9665dbc57cb8b","sha512":"13929d76acf176301ae4c4565c4a7156734df1f1a2e484616e77a8444faf398a2eb8d1c4e03108ee617cbf49a2bb2af22c71e0b9671f7f33ce8dcddf49476219","ssdeep":"96:iTp7M1D92QpGUynvxcxklRN7TSfib6sEUiXHlFOSJnF+OCYSjc/oNL:iTp7MGQpGtvCxkp7TBmMo/h9CYSj4W","tlshash":"48d1d7997240f47715e908b992b2470bfa279602311a902db5bc89fe2b6ec857077f78","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.887613Z","times_seen":555,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/digital-agency-in-kansas-city.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/digital-agency-in-kansas-city.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/media/com_jchoptimize/cache/css/af1b1ea97835a50ca7649fc0599d6b04e33b4ca59a6445984740eb6c00e3ba16.css\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41568\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sun, 24 Aug 2025 15:09:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cNxF2WFsV996sCCjqDcDgWAdfreoB42QxB0XKkC0zgMH0nnz6RJevjWMMIUm4nMCQBfJ%2FNYolQxYmuB3cLohOY%2FUw6mFZWzWLNUMY6Gxeqbslo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebedadd7623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41568,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bfe5a131e76922c54421b83f5b4d6b02","sha1":"37167f7a99a6d2d519e82f05c44514a69c576c17","sha256":"9cc731d1106182511257c86dcda96157a31c2a7804e71bc1f75a37d052656f67","sha512":"1d1272cdf287dbe02ea64939ba84ee5781184eefb07d98174816a8c8ca37a912409e544c0fc1b29bf0046ac4fbe6cbc16fb33f25109a44a848423f35d1f0d0c0","ssdeep":"768:l0fvMb3tjIgvqG2T9HPbaOG7kpbq1H0o+OUTTXSllZo+j/07kwf1wUUQ:fdJb2xPbaOikJUHZUPSLPbWdd","tlshash":"94130132ebc90d0fe586e574ffd3c4898891d730c2c74a5decb863b5da690301e61996","first_seen":"2025-12-20T03:33:37.907162Z","last_seen":"2026-01-22T11:35:33.120583Z","times_seen":3,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/tribute.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/foundry/scripts/vendor/tribute.min.js?7e64b8be04f0d43879fadc7326fad717=1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9222\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:10:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYtuX4EvKRX96XtAJ%2BjOvJ8E%2FrG708%2Bv7D9IIt6paKOvy9dwA2Ddxrk%2F%2Bwwri%2FIVwrpZaDYEwi%2F6n5PAKxz1GufkXZ0soaSvK88yRatdJ2YgRY0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebedbcdaa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":31307,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31305), with no line terminators","md5":"cb185ef50327281e46316c1a8b9897a9","sha1":"2351131b0c71d3e432ba98ba71f3b4948d9a672a","sha256":"e643d98709046676f75aad3823be07cf066cdbd2d749060622ca2b0729eb6d8e","sha512":"d8fc9ca6b09869263bd3d80d2d7e5dcd9a43a3c8d8315feebe09a2cbd8bcb73e80123d1bbda37bdef07edc174836d8e87522e6f0b7261664ce15c944c474d015","ssdeep":"768:sCVH/eGTfFwzn8M2wswezcDrirXlqtLKCyhETwQ9iW9nWmqoqv6TfVCgX8igV56x:Hf4wlqtGYZ9oa","tlshash":"ede2d9b0368136b0ceae722ad1ef5158613325541486d0b8f03dd8c96ff9a4615bbfbe","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.292064Z","times_seen":138,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407700\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-06T19:49:38.936749Z","times_seen":957385,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":81,"dns":0,"connect":8,"send":0,"wait":25,"receive":3,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407700\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-06T19:49:38.936749Z","times_seen":957385,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":76,"dns":1,"connect":10,"send":0,"wait":23,"receive":3,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407700\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-06T19:49:38.936749Z","times_seen":957385,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-design-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-design-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35614\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpnYT0k2HFANDFrxLHn%2B23SR%2B9Scg696RiwowMY6tgIdfhfBVx1KoAHa%2BqHlLzc1hXaScYjxsYsPQ%2Fdwq7FYM8nAs031XW3oAZqElFK1wfHl%2Bzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf35bcd823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57658dc44c3324063e3a095bc2ea5ef6","sha1":"f701114fced5d53f680c06a077c1b61f77962e62","sha256":"d1bf7bd5f3429d03d3fcf8c92e7b0e5f02bac793de401ba151a431dd3978bf63","sha512":"518d3fca4f82cb2f19aa3416e59f5f9792ba4ba9006db3757d18182a2630f12a18c6f880f9b4859062a3835aa180514551fe64b435548b991f7f0e77f7e14255","ssdeep":"768:7QXfZVedY1bftYkWE2tjrUIdD4hAH5BADgk4mRQEG6s9U1kgmd:7f2RftGE2jkhoTqg+NS7rd","tlshash":"05f2f15243e1878d52dc9c7524d9032ae59085b05ffb90b277f46bd2ed3a32c8cd1d9a","first_seen":"2026-01-22T11:35:33.123314Z","last_seen":"2026-01-22T11:35:33.123314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/legacy/js/jquery-noconflict.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/legacy/js/jquery-noconflict.min.js?0b6ee2b15d1812bf231ba577bb7488e3 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9yPRJlieyDdJloGapXfT47r%2BZAvM32EKvI2ij2bl%2FDH7eCK3f818jh1rT2iDcfdFu0xdzF2HuBuF%2BnydpvZM7D%2B2mK5CsjXtCGAgeO5pAhdra0%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:22 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3cc1423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"504da43c893d66e1f5181c5050a0a83b","sha1":"647005fc12b79b3ca2bb30c059899d5994e3e34d","sha256":"b2780d4cc319da7a668fa616e02c74f77835975dd95c989340dc2538709ae805","sha512":"1e60797310be57ceaee2987f61d12a6881daaf8e9a9ba6d2cfad9caad94709b5741069ab5b55a33f4f0a140d4a51faf24610f9696fac83d30ed7d7768f0a92ae","ssdeep":"","tlshash":"0b800008f88280280ab0200ea0300b2ab002238e2030c08800ac0800000828c2a02028","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T16:48:52.408686Z","times_seen":3603,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c1ebed46e474c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T15:42:56.635628Z","times_seen":337638,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":26,"dns":7,"connect":1,"send":0,"wait":13,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/cf-fonts/s/noto-sans/5.0.18/latin/500/normal.woff2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /cf-fonts/s/noto-sans/5.0.18/latin/500/normal.woff2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-length: 13444\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5vDyvJNpsyMrT0uNxDImes1qrqzB1XbMmDp8mHYnz3zbmNOSR4YX%2F5YBZCn0EnpSi7O8xmJGydz8TLop27BbDEGG4rQUSGRUi32JaypXuPw328%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c1ebed63c7a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13444, version 1.0","md5":"1835719ea5e7a01b671842dbdd2cea36","sha1":"604902730a4c6931978d6b60cb21e300c5c83983","sha256":"7b15bfc7534772730b00539c7d054f53baa019d20f74ba427ff5f486404d9f3e","sha512":"f1345b853649af7a936c5dcc17028eb208ca4ded8c0271f89cc452fcf533a6a23be14203d6b3e95b9c51f1da4f37513155e8399f43168d9dde085070cd79dcc4","ssdeep":"384:ebEf9HtZYgkdoyRpTLzV7IrH+d4WV/5pNwTR8Z72:rRtZDkdo+zSredv/5pNwTB","tlshash":"7252cf4caf69a59df2f04539f82f1f4187adc7751f82692d345cd38bf9e0a12081b466","first_seen":"2024-12-09T17:37:27.650667Z","last_seen":"2026-06-29T22:06:44.485208Z","times_seen":54,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_easyblog/scripts/site/vendors/swiper.min.js?66fd62324691664427d4b060a3095b9f=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/com_easyblog/scripts/site/vendors/swiper.min.js?66fd62324691664427d4b060a3095b9f=1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 34797\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:11:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGAhgBkVGzR%2BfYblyT4OjdSfNrmPOO3fYPEy%2F89UAbsh4i1ctGMXLGJ0WqYfgIwxnBHrrgSnc%2BnY5YDzPrZyaYdFfiVHb2QhUkRT2Y478Y9wCjE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed83d1023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137654,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0b27445c13648a4664dd0095ca9878dd","sha1":"d7a4924966e5123d7011330ee321faaefa9c364a","sha256":"4cf097057ead8b1537b380ce43b9042b3503c7d3994bab3fdbe88299474511ac","sha512":"6978bbe138d0b98779e6b43ed94bd4d77f6ee6d50151213aa03aa7d5aaa972106d9d4823c89a859ef77758f84cacbafc830c550cf1f3accd23e4b070f90ea915","ssdeep":"3072:jCdXvbh9qR53bzPpy3yIs4qUL4ne54m4N8/t1pMlq:uXvPqR53bzSs4qUL4ne54m4N8rpMw","tlshash":"ffd30b49739162a6d2e72256424ec10162b65852b50ed1b471b3cc1b7ebce280bfffbd","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.268081Z","times_seen":117,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/cf-fonts/s/noto-sans/5.0.18/latin/400/normal.woff2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /cf-fonts/s/noto-sans/5.0.18/latin/400/normal.woff2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-length: 13104\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvZW%2F0iwD5%2FHtaCXe%2Bus7NLjNzfc%2FYlo7OI8Ong4QSEa1K8haGyYNC8KHMCJdbBk6e0uyyzZgB%2BSj1f1Xsr9mbkec8fnXFIPNhx45HqPPosVilM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c1ebedb4d8023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13104,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13104, version 1.0","md5":"b35fac17d24450c3c7e27a11ce54cff9","sha1":"cb817504b4bcdfb22c72138409ddf39cd22c8912","sha256":"0d352d8a993d3f79d860e44d74ee3e132649253f2af24caad088c3aed6ec08c8","sha512":"ee6bdb5f7f58de399ef62e08a71ee9c9610dcf6876f4e35546fa3ee9f0ebd34829c85ae9bbbe652ac7a8446c50383e7c1ba973d4f5bf6680899f9ceeb49f6c95","ssdeep":"384:Uw6oF5pOtAv0yEBH7vfjiccMkqFVKYADg5oNW6JH+:XFYAvQV6MkqFVrMW6h+","tlshash":"f742d0e265801a16f622f3f06945c7707281e4b0b4ea864cada1b036bbdc87d7497edd","first_seen":"2024-12-04T23:08:30.093623Z","last_seen":"2026-08-06T01:45:13.532638Z","times_seen":1690,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 758\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"7573dd8e14256222348efdadaa83e740","sha1":"b8707f82a8a51f948160dbafe77153aacaa5f30e","sha256":"80a66438dcf0ebc5a25c82afae2970808dd4146723c78c41074ed367a9253270","sha512":"03f2e7b36e1e894153c8e20698a0545238643beeb5d9ade1295b1f4edf6abdbd0d64a41f95b3280c28fa2d5d72df265d2e85decefc463ee83ac1863b03da9f4b","ssdeep":"","tlshash":"45314173aa00c91d71748225b98bb08e895e934e8644acf2b29812fe1ed1ed58173e29","first_seen":"2026-01-22T09:43:26.305644Z","last_seen":"2026-01-22T15:05:12.93222Z","times_seen":12,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WGSbWLbhZEGFhdBM8DnhqSHsj5CCyL8V6OsOwHzY_swQNYUvq1jxBFHrsRkXPFXKuucawohJc\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1769073977137048\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:03 GMT\r\ndate: Thu, 22 Jan 2026 11:35:03 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-04T17:33:10.206718Z","times_seen":29138,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-support-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:13.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-support-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15742\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:13 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c22BZYTJhH2oxyfxAS7coDqbx7oVPNGeA14sUkpE%2BnHcT6vpSeO9Y9OniJtYkQ5I9Za%2Ba7Hyk8bAxgT6URdRYNZShPTiWKmEak5RL8tzKYv75A4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf242a3723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ed9f9f1e8083b0afb1b29272f63dbeae","sha1":"ff71d9a684dc2e0c57a6f5690faae5a4a4b3a1a2","sha256":"587c3f86287977907d76df8dd8e1cfdcebb394baae957a813adff08472f5b33f","sha512":"ebcb1e2a975a3addb0239bd23b001b27f5b67fffdadbe14ebc67b4718d69eb4c1df3e9aabd1e502b458e4c8ea6ee9b146b27fd8c4fd29a8cdfdbe625b3a2cb2b","ssdeep":"384:J15FS4mjGWhqerd0ly7U6n/pX72SUDR1vdM6rOO3bpkqxy:Levrrd0mASUrh350","tlshash":"9c62d0b927ca4e183c0f153115533a3e2ae23d6d9895a7198c7ff243e200ea45f67637","first_seen":"2026-01-22T11:35:33.129743Z","last_seen":"2026-01-22T11:35:33.129743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/components/com_sppagebuilder/assets/css/font-awesome-6.min.css?032af75ad5933f9f9a025db2a15c10bb","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/css/font-awesome-6.min.css?032af75ad5933f9f9a025db2a15c10bb HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 23408\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Sun, 17 Aug 2025 14:27:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXHDsn4EgpVCu0EDWTy5A8zRU1ArA%2BRuH11TqQmMc0gs%2BPw36HsiD8cA8Ie%2BdspBkZitud8KShHwFp2g3aLdFlmM8gBZkkLUAr7XnIiYnBNY994%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed37c0623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97995,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"5c6ba7595e7c32547b48a1cffe41f064","sha1":"a241d8ad52c9b3defafdd7f95b7341196eec89f7","sha256":"a97a527e7974ed20a4a1cca500e06bf0cb5206b4503620e2f318e7b89bd4068a","sha512":"a3e3b0ee154d44afffbe9205efb795b989f0a01db5d5fd1ca5f0b3191d8036228d97640450bdf1c57b25c8a6138572599bb04d9ce0369e88992e54d6f52f14d1","ssdeep":"1536:EqMqMKMgMlQuJPYb2Ni9F/EXSduXgRw0RY:OJPYygEXSduwRw0S","tlshash":"a9a361e4e48d09d9f732c44faf95b37861b6f738d5810ca9f02f5a0c09d26a425d6b3a","first_seen":"2024-10-12T13:55:22.116115Z","last_seen":"2026-08-06T10:49:38.256663Z","times_seen":841,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_jchoptimize/cache/css/af1b1ea97835a50ca7649fc0599d6b04e33b4ca59a6445984740eb6c00e3ba16.css","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/com_jchoptimize/cache/css/af1b1ea97835a50ca7649fc0599d6b04e33b4ca59a6445984740eb6c00e3ba16.css HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Thu, 22 Jan 2026 10:52:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gP3pa6ad4PgwKs5GLFnqRrM7ngMeW%2BzrUPBOS3PWtD3bojN5wlbpOCr8hQPf2w5VYYj6O6wQ4EuuBj7TYd0vW1RZHJEa91D76EskMOXa1MsYoc%3D\"}]}\r\ncf-ray: 9c1ebed3ac0d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1839048,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51105)","md5":"8061bc0e8850064c419f396a293a2c68","sha1":"f380131ce0702b85d4232b58a41075d13aa117ca","sha256":"82883381c882c67bf6c30380d3296d5f621276e6f9792f0abe6d84ef2f79ce6e","sha512":"fad84d3076236943493fd400277d420ad669c9d088d6a7b775207eac0aaa87f054d36469ec297c585dce99fdbdf23c10e0fca4fb3f17f381782e41e698c88e62","ssdeep":"24576:+Zkwu1CAPkyDn3uyU5ZrKeG0mTM8uWGEu8+0KsjoE+0NEZdLt/:VVFEZZt/","tlshash":"a625f972f1913079b827c719a6ccbeed7629a002da124ffaf853772887c62d70573649","first_seen":"2025-12-20T03:33:37.878984Z","last_seen":"2026-01-22T11:35:33.132684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":469,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026subset=latin\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:07 GMT","end":"Tue, 03 Mar 2026 17:10:06 GMT"},"fingerprint":{"sha1":"82:59:95:33:5E:76:7F:3E:5B:45:F4:CA:83:29:7C:B2:19:B0:A5:C0","sha256":"A1:28:19:D2:C4:EA:69:3E:6D:8D:7A:20:FC:3E:A6:13:BA:59:C5:9C:DE:7D:D1:25:3D:35:68:98:FC:47:82:9D"}}},"request":{"raw":"GET /css?family=Roboto:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 22 Jan 2026 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c1a689e52451e6a409deb9d792dbac30","sha1":"d51f6f8ea1dfdf5fb4c0dcaf3c7978ce4d8eed75","sha256":"55960525d6ce04943c6bde176b9ab7c92f4a27666c7105e5b0d32a336ab1c0b2","sha512":"5839e22aaa92cf2407b1717f337de537822b89e5745d60a1db18ba779cbe19fbdc4266d89a73adba84f7005bc176eaa0d9294903992cf04e1be63072b6f7e675","ssdeep":"768:yDcDaDvDcDzBDFKDeDODO/Re/zUFhl114KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQS:zO3YRSrslIxerANy3El","tlshash":"efa3eda1041b5040ab834ce223cfbe34fe1f92507151d0b9abfd9b6baddbd66526835c","first_seen":"2025-11-19T00:01:22.142754Z","last_seen":"2026-05-31T09:48:00.748269Z","times_seen":5838,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":93,"dns":17,"connect":20,"send":0,"wait":32,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/white-label-development-partner-ship.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:15.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/white-label-development-partner-ship.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9676\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:15 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqdvWxVXbbg1%2FWVhKBE1qD0eYS9EGITSG3JWiS3ncWj8UqO8omXTEI5gxpOSF5ktvgRVoCn5kd0Rqaka9KWqMBF94ulF61IcWOVErHLiemfCJuU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf2edb9623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9676,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"076c86c0d5dd6a441af6d0a8dfdb1605","sha1":"89362ec327ae9319b297313965c08c7fd212f308","sha256":"87ca67914634ac627abac53969084fc2cb565d5059eae432deea1940e653f819","sha512":"ccf9526a8b082419f6b6f881fd4cc6df04d7a27bf1761f13867321542c7f534aadf899cc613775168eff99ad193e4c03e7a2eafc8574b0f7f6f86f0368591776","ssdeep":"192:/3AuV5uyi0CYcFLgMgofyzUIWFAGMAS6B3v2KqA:/QuV5lpCSN5AbzR","tlshash":"d412aff08c76cc16993e19a1f84a359a4279cc2297033bd7e927494fd2c615db8351ae","first_seen":"2026-01-22T11:35:33.135099Z","last_seen":"2026-01-22T11:35:33.135099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/joomla-web-specialist.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:18.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/joomla-web-specialist.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3810\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:18 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYFfbd9F6fMSZ2Px307FTvo%2B%2FS4dI6r39%2FB7ONIc313QilkPDxnTgkL%2Fq11RcJNxr7ULUSAfJ8f%2FfbbjmuJNnZ2Bo3FrtRxIGdPIXOXvq5tFUXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf442f3e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7086a698c390a81706dd0f68716b5da","sha1":"444989dc5b719616b22d76b0269cb45ef582d576","sha256":"0da85b8dff7c8cb8fed9802d2a7083b0913287a9a0d49665cec0e0eb09e79979","sha512":"5237047c37118cf274f05cafd0146cc28a2dcbba1a4ceb8c01ce300c58bb0ab21bfc6e94027a000219189b0458f01ed1243ad975c17987a9b13e07a6e1c7471a","ssdeep":"","tlshash":"b6718de4e0f50e578d88f312e7928d1d4a34db862e5c89b0caecbda619117cd7e82302","first_seen":"2026-01-22T11:35:33.136523Z","last_seen":"2026-01-22T11:35:33.136523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/toast.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/toast.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1086\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KK8tk4Gi1iE7%2FhIsd9TZe0oQgGEuCHlaAcHdyM7UC9hCrxb23N6oGD3fnWGJ4nl0%2Fg3Uxb%2FGuOTFVwTtpPaFmHqoRvJcMsue8bW%2FXaIrM8nsNKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c2623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2789,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2788)","md5":"a01efe94b21525a5b3cbf62e8cc861d7","sha1":"b1aafdd16f8d471170f25906036e9286d86beb03","sha256":"2bf8fec6e771899029d29689cdd62530a75efc58cfabdc1f0358b1c7ae994787","sha512":"948a39f5a206f979f88d2aafe5ee9d6d9a7e7dccfa0f97a31fe669cbd087f4d087d5da0eb3f45b766e9342e1d9250e9ebd204e15f33e3da1c8a3e7f7131f2d34","ssdeep":"","tlshash":"25510145738e643756ea85bf9137828bf5344594a44900ac787998cdab7ec8373b33f4","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.883806Z","times_seen":500,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/popper.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/foundry/scripts/vendor/popper.min.js?7e64b8be04f0d43879fadc7326fad717=1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8230\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:10:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jGnhrwyniWOx2lIjrk%2BKjsZMfgLfhEG4LG90bRFsJ%2FYoyA%2FpHpto7dkoPcX9CwduisDlrWuPiSaP8gV1jTKW2MnSQxPjnPedUIxaKTz0luU1mM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebedd8e0423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22552,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22552), with no line terminators","md5":"78e47118e157ccf4d07fd84919783d14","sha1":"af070ed2383bc7ab6a5285ddbacb89a1f78c1b1a","sha256":"727e5d96f1b1dc5a21056c695a97fb60a7ba131158b0dfe0a338088af95c816f","sha512":"6e3cd95b1be0301d7b649274e70c26f9054bcbba2cf9bdf727a839bcc8445a7a865e321e09eb3ba301aaa4b7b805a5a2d647910ec2b8abde5b2556c366f37e2e","ssdeep":"384:qyvEyVUsmqx2pKYLHcH0O75H7LFuf0Jz/+GC2ozRz/yFbj7gRL50AkTzrm6kNOJz:qy+smqmH8H0OxfoKvmz/yNjERd0ZTzK8","tlshash":"10a2c8cc3590f0f2152b83b6906b111f7233a935118ee510b255e6ed3c75eba626bd3e","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.283254Z","times_seen":138,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-experts-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:17.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-experts-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5724\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:17 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ns6v8UuWU%2F4G9PgmQ3gf3Y8qNRj2mRyNRRT3xq%2BOUlYTxo03fzEmu5HAxh3qZuI6ESJimUaVZFGlv%2BUWXsaviaXIah9NAhS5%2FwmI4qVvNfBwowU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf3c9e2623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8d15d89440ffc132dc7c6caeea1b1c0","sha1":"597f56899a0e06aa66c202062d0475118856e262","sha256":"db9358a4c65ae702d1d0e4a38c9b5e415bd237afd6ed2697a77a8d1b2a7c1a9d","sha512":"027bc2428e10cb3bcd90f995115b52088eea5cf8969df90bc56b7689e0980a98bd0f779919ed7ba3d8519818b536fe86c6817a252723e2fa3671971e391339ec","ssdeep":"96:U3UXz90sGhe/SX8YdmKIj/cfKRpSvjOHSA2y7j9R84gu4BDG6k3VD5y3iokiU8sP:fXzasA6SMYQzcfQy07hy4gjpiFyfki7e","tlshash":"38c16d39069fb5549e13ecb06c75288660075c922ddbe80d54ac0ff22db2c56fd7606a","first_seen":"2026-01-22T11:35:33.139385Z","last_seen":"2026-01-22T11:35:33.139385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/php-website-design-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:19.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/php-website-design-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6374\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:19 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ymMGH7zvUJAOQl%2FDQUzqwZ%2FtDJVru6YyhWuMvZC5OJQn7ldf1TEqb4ZFlYsCalD0Nx6bVq9IheXJftorGDhDBEx6cqHIfd6OrFG2dqphdbWEUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf47e82823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x326, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2714b8ec856060df3757935af234ddbf","sha1":"f9327f830c3722b7f2f6e5a283e8abc3e89bcadc","sha256":"e7acb9cf17b2ad22e8b5b7aa89d103b757b1d507c26c751bfd1d1fa22f9dd3bb","sha512":"6c869ebb5b572ab6ebbd08120c85c8e8ae8bfc361f21f54e8a1641a1cc2db78cdfebbfd3555dec1ad9593b7ca9fd83d357db21acfa63c24715d3480727132baa","ssdeep":"192:sMbf56Rh6Q2oMUUN4LNlWMYH88naEbbFHvZb0j:sMbAR4o24LNkMWxaoHJS","tlshash":"13d19dd34e4adb8a598b708892666131fe2714b7770b6764a4f3cac3397432856023f8","first_seen":"2026-01-22T11:35:33.141298Z","last_seen":"2026-01-22T11:35:33.141298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/collapse.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/collapse.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1559\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qj4lDzfD5OnFpPEYtduDaccaYWmC4CB21gnHQ1%2Fi27jfHUG97JZs8F8kAqlW2FfrunCUM1ADCt%2B%2F4eI%2Bl3f3oVaicNslLJexFXh6uJnzXf32GA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3ec1b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4047,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4046)","md5":"1fc6cbb582bac08d3709c425b940c63b","sha1":"d979ac44673efaa4d9df40610127e8e07321c75b","sha256":"aa9c393e3c42f8c5d0b24bb39314e5894961a0dbc99adfee9b0b1dd97978879c","sha512":"684bfa63a02185d2efef1b90279fea45e676daf0ba7e685ce23f47bce2050dc15a293d2b26b0a6ce67fd86399308d324fbfb90253dbf620572f4907b0f5d7848","ssdeep":"","tlshash":"5981410e7240257345de8aa28236468ff7358e887254566c742d9eed2e2dc863273bfc","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.875696Z","times_seen":583,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407700\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-06T19:49:38.936749Z","times_seen":957385,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":69,"dns":6,"connect":21,"send":0,"wait":27,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/shopify.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/shopify.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8266\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpn5YmlPZlW2qXvc8PAxxuxEUEC8hvU10wRN0eQyJeaheh%2BL8cVwWKCUHQaK3f805d1CXy%2BkJ%2BMs7%2FjcLucOdc7niG8Er6t21bX%2BLoDpNe3Vc8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf19f88823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"d58e74c37697b25ad9c8df38662b8aae","sha1":"409a04a9efaa31a8956655bc5a9e09c7bfe5d968","sha256":"1a0cd087209193e41b840320a600f6f66a2e129668b6248e6254a8f3773c4ef2","sha512":"5297e9b102edd216167cc38653c65a86f21196314721f4987adf00249b0d4caed09f8a521da02a97f8606dd02b91b5b6cbe9a365dced6430298dd5316c0ce5a9","ssdeep":"192:bSRVkniie9eYdt9Cz0L36QnftXRdUAqnu/TSwRMnxnZtuKEQdi:ORmnix9eitMAKqftfU/2GXL3Ev","tlshash":"d9023a0a7db1e881084d7ea946eca052d3f74fc4ad10904ededeca935d624a8cdd92ca","first_seen":"2026-01-22T11:35:33.145283Z","last_seen":"2026-01-22T11:35:33.145283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/digital-marketing-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:13.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/digital-marketing-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20008\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:13 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R2lEBhUh%2BNh159XfZHvdphhjktp6Qb69Cwzgf%2F4Ir%2BxYlGm3mViFIMrHXTz6H%2BC535F74eyNTMQQkfLQtoMjkpB71b6joSEY83%2FnM1uPPhys3WQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf242a3923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"568cc439fdbef9db4c0c44d916417d9c","sha1":"610c4ab63b7f7b90fe028ecb16f3780f3bb5f57f","sha256":"273712a1de2bd808febfe4264f3d48425d02ffd109d6db9f9e63772030d00ac8","sha512":"92214bb8e572e88e878312bd5525c82f7173f2dde49ce146c632a31f835b5d1cce1ca4cd5522945f5a8580716dc5f55813cfeafec4188fbb78f6858fd9248275","ssdeep":"384:S15FS4mjGWhqerd0ly7U6n/pXGqiothhbnodrvnruj1kegNkpm:cevrrd0mp9thM7rMkegCk","tlshash":"f392e0637f0c1f9ca89ae4351ec3ae5c35f1b6ed0644b680627bd41b605a9d42f3bb20","first_seen":"2026-01-22T11:35:33.147454Z","last_seen":"2026-01-22T11:35:33.147454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/components/com_sppagebuilder/assets/webfonts/fa-solid-900-6.woff2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/webfonts/fa-solid-900-6.woff2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/components/com_sppagebuilder/assets/css/font-awesome-6.min.css?032af75ad5933f9f9a025db2a15c10bb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 157192\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sun, 17 Aug 2025 14:27:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w94TLJhcVza70d1fvG%2FlXEThXFGq22lF8mAPPkS4Vigqnb5fZDwBzk82RGdzVql6Wy81%2BY7rlxP3zMeTbSGM9yn6f7jZXCJWQKZCgwStgun5LR0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed6ecaa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":157192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 157192, version 774.256","md5":"237f4a0afbdb652fb2330ee7e1567dd3","sha1":"69335cd6a6ac82253ea5545899cccde35af39131","sha256":"1f0189e087fcefbf654fad74a3a06668b782c01353a61d5c0b7f0bf23e33c020","sha512":"27e8e1f91507179c207f93a19485738ed5d372a977eb27d44a4ed163013097d38b117c7a5bf4336ecc9862ca514d78ffcd2b8a07e304bbfe1b2cce9c087baa38","ssdeep":"3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO","tlshash":"5ce3125bf5e6dbe5525e6d64fb5478972b1030823ee11cf12ce2206eb889317399e08f","first_seen":"2024-07-18T18:39:32Z","last_seen":"2026-08-06T19:30:47.290974Z","times_seen":19486,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/icons/android-icon-192x192.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/icons/android-icon-192x192.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 7512\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\nlast-modified: Sat, 23 Aug 2025 01:19:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7StlAjzbsSz67E67FSNJUPEUzUAy1zhhltU198dMQpUZh%2B381CPf6w5WpvlNNV9D9RsWIQ4bFLlh%2FCdgsBq9DeUfGtwpDaiAngpIbF7h9uH8A4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebedf9e5a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0323a38a071d2a1c75b20d12b8572ec7","sha1":"2ce668fd9423e35a098f23739bdbaa8982e9bb5c","sha256":"6b03aaa8d4ab58d21935078edfc6e9be6e7d5f0162ae68f9ec3e8a0a233d89a9","sha512":"614693a9ad60bef8e21ed105375108481cef8cafdd94a1c5ffaa496246e3fa420fa42a90de7fab2bc644135cc8bc345ef28b604691a533abdab127df79d87f82","ssdeep":"192:OfoIPbwujVKdVgqHyzqxxOvTCZFSOs43muHrMsX33:/kBjVPqOs4eZFCggUH","tlshash":"89f1bfe99831a6af7d8c7e5ec946ea47c74c85bc03e56c28d302cc4c9cf2601d996a51","first_seen":"2025-12-20T03:33:37.871439Z","last_seen":"2026-01-22T11:35:33.150351Z","times_seen":3,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/icons/favicon.svg","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/icons/favicon.svg HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 17797\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\nlast-modified: Sat, 23 Aug 2025 01:19:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'none'\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNafq7ftX5c2E5tWwPOjpNUnHjrxVbT1Gw6oIi8lEsY41mLTnOMV56m6dj7Rcjt0bmrBE0%2FlodqNjcUuoHtMCVnRMuX%2BQ%2BCV85XhiYBEExtULzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebedf9e5b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":38516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"372a569d2e98b3c8cece33a1b017278b","sha1":"d749ec3b574bbc6b939c86314334670ef4ca47e9","sha256":"db48af44c66b68a2f629aa4b14ac3af8ed7319a14a6b4966560f4ec6c3fb922c","sha512":"b7b4f601beb267b18faa882d5aeb68c9622a2b1cfd013729d1c0208744e49f88e112519d8985ad67a80559210f455a2ccf3f76ecf013ff0440dfd98ed29395e1","ssdeep":"768:b30YKf5a+fwaafZgZV2yDrSuNAxZ+CuNZZrCS+SqivDzTFot8tz0Duy:b3yf5a+fwaafZgZV2yQv8T+2fZoU6F","tlshash":"79034ddd3066291f7dda4a1bf70ab518973c94df083c16b4a97f3367282e3552805aec","first_seen":"2025-12-20T03:33:37.838043Z","last_seen":"2026-01-22T11:35:33.153152Z","times_seen":3,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UHoJ-SWJkE-UNihsMOmmBYFz8Oos8-hzEQzAUwfgBYCKceExsHwXIx_L1H5OaVw1qyqM8TtcRgt1B4Mw\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1769073977113995\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-04T17:33:10.166857Z","times_seen":29934,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/custom-ai-website-integration-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:09.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/custom-ai-website-integration-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26894\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:09 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZA5Lutc8Q7GmRx7dm94BkuhOXeubSlptbKb4QqcBdqKbjGZUUSqWhz3%2FEMWJMf2BC9jrAARK%2FVgdDS1QsNKJxNsWj4oW4%2FW37QdfWmvuiVeuq0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf0a9d7823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf6952d2d1847ee9a249bdf01609b44d","sha1":"4204b90b5b222fc270905b715ccf19d2d1fbbe58","sha256":"9c7e848d72a4544d8160533cce78de6034bff83971f273468d824580301afb19","sha512":"1f8bfe452c740cf0c93732387f1de0e14795f80a627974bc98769e33d8ed1510041a75136b0c13cd7103692c856ec6cbc813ec5c1219bad1e03f0235afa3d60c","ssdeep":"768:Hyhv5sqacIKvf2zUggAadrWYSDgTLMRTcI8:HcIWuzy1EMCTh8","tlshash":"42c2e0417ee20419d5ce774adcf473de51948aaab2cb23437127e3e1ae22aa3dc5430d","first_seen":"2026-01-22T11:35:33.157225Z","last_seen":"2026-01-22T11:35:33.157225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/wordpress-website-design-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:12.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/wordpress-website-design-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14972\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:13 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmisW0Q935ylbClfKI7wS3UZbQszTcoRBI%2BUFF5cMSft1wvNF%2BQktlaDNNdnE%2BbNiC8PELtJ1Ls3inv%2F3QqJEuVMPLNGM%2BBZp%2FEVfEROfbzY2hg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf2199b023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14972,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23425d313403ebb7c98d1dea9239a913","sha1":"cc122fb6465f8aaca4ea55c888f0368b72e6c2af","sha256":"154eaae3d0971d2dada9cdb4e1036d66e83e2154b3b60c953c228447a026e9c8","sha512":"8631a53a6fbaf509d2103d46d21e1c39a9f105db5295efecede17dd09f41d8d3c7479e31ca48fda4593d1e74fe5680f4a6a6ee210f9ea870a786c0021efea2d3","ssdeep":"384:K15FS4mjGWhqerd0ly7U6n/pXTtQEfvdOYgNCT9kxLYlxsG:Uevrrd0mJtQEXArCT2xLcxsG","tlshash":"7762d096b34f9f146ca70b208b437dbd78b9522aac0967051f7eb2565980d801ffb338","first_seen":"2026-01-22T11:35:33.159423Z","last_seen":"2026-01-22T11:35:33.159423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/blog/35/b2ap3_thumbnail_whmcs-allow-url-open-fix.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/blog/35/b2ap3_thumbnail_whmcs-allow-url-open-fix.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 21871\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Fri, 29 Aug 2025 15:06:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2E45orotqy3ZlkaoMF1C%2FywwMSkQWFjK1JxGAOakwHqL3g3r74jN2kcKTqmZ65TrfEPzovj%2FheFztIUdHaTIRN8Fy3LrIBhSeZGOgAsKikGbm%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed62c7323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 274, 8-bit/color RGBA, non-interlaced","md5":"d8d3f65a0248207a9888944cb8507ba2","sha1":"2154151d0533a89085e14a0204d37d78947027cb","sha256":"438b4292e21b305face554bc898aac1b83401e5e949025694f0d3a7a6391383c","sha512":"624b5efc7fcd22230a3b1d652a960ae17a2e1460e00dbb203f0e96fa4933981e170b77e9a00b78adb2dc16083817330a06b37bbde401e068c730b6df65ce1483","ssdeep":"384:vno/U3y0mCdQrrere8D5Lvx/aMVJjObE/Cpy6fKqKCI2:vRyHCdQWLD5LvlxVwbE/CFKCN","tlshash":"90a2e019e32dbaa602dfce6acc48055999fe0b405d07a69343ac53804d29f4f59ffdd2","first_seen":"2025-12-20T03:33:37.863422Z","last_seen":"2026-01-22T11:35:33.161476Z","times_seen":3,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/digital-marketing-company-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:17.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/digital-marketing-company-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2250\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:17 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUlAWBIGuOz7eKDxpsGAd75S1y8Z4GlVulTw35uxrySJK8HF%2BB%2B8jA7ZeMCp%2BCryY4vPLauq1pQMNC8YKbP7BWd7S53MuwfVM55uBYYXQt4RzVo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf3c8e1f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"663ef819499d5338f659a8920cf8a207","sha1":"a0d8dc992833b79c7f2ed6128486491a3247b290","sha256":"e76f4baa95275cd1072db75320927930a5074ca7f246cb6977a2c24a1f7e7fa0","sha512":"82e5a90e3330c40ae9bb6db280e211be6147da4d2de963a06a1cb583b5aa2de4f67b5e282a9e1ce972ad4f16144bc71a9c4dcc3da497c12cf554f2fe98d9c964","ssdeep":"","tlshash":"0241f795b80cb672e8ad2a334668b446f2005d39daf4441e7750a198bab14b94b7fc30","first_seen":"2026-01-22T11:35:33.163627Z","last_seen":"2026-01-22T11:35:33.163627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/scripts/vendor/raty.min.js?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/foundry/scripts/vendor/raty.min.js?7e64b8be04f0d43879fadc7326fad717=1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2592\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:10:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCmTDtXRWjNYhWEmeowlYvqUBvsoeOk8JHjKxiahkAP3Nfv7cKN48knQCApGRhaPxJcvgNk22Tf5of6wBob762jClro3GGZE3fFTeDvfvV%2FwWgE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebedbcda923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7556,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7556), with no line terminators","md5":"0cae8863e335d3fbf64703587cf4b5cf","sha1":"e9b8e89999ca43bc093a196e11226c4a69d44fc4","sha256":"89ae3f84b5ae547adba06c8c36fa3a84a7646f6f0930b4b8d7e485c942691a19","sha512":"7008d7500ab57c8ffbb18f38eec0b28800c1d8b3a875c00e67c58caa72242aeb670c238264c29ab103aaebacc970ecfaf6cc559c06c3e7baf5323b7675d801ea","ssdeep":"96:SZ41ZxQEf22HHhOgWYQPAPqbjeC3/3HLGBNVD8DVN6vN3WNkJl:Sa80LUYQd3vHLGt8sl","tlshash":"00f101d8f2c67117ada373605aab270ee233ad45a007412d383ed9d5efa8d49207697c","first_seen":"2023-03-07T12:25:23Z","last_seen":"2026-07-28T18:47:55.277768Z","times_seen":133,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"response_type\":\"token\",\"grant_type\":\"cookie\",\"client_id\":\"c5e4f61e1a6c3b1521b541bc5c5a2ac5\",\"organization_id\":\"cbd914d0-61e1-4571-b996-e7c6407eb015\",\"redirect_uri\":\"https://secure.livechatinc.com/customer/action/open_chat\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Thu, 22 Jan 2026 11:35:03 GMT\r\nset-cookie: __lc_cid=fc6f202c-64b1-4819-a1e4-07b59056d011; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 22 Jan 2028 11:35:03 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=d8766cfc812871e000171f0637fe41e35d833501925d7ca2c12ee7858ab99e5b8c27ba2ad4890ea91201a4311466dc3efaabf7e8a90f8a0c6113127dcb98; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 22 Jan 2028 11:35:03 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=fc6f202c-64b1-4819-a1e4-07b59056d011; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 22 Jan 2028 11:35:03 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=d8766cfc812871e000171f0637fe41e35d833501925d7ca2c12ee7858ab99e5b8c27ba2ad4890ea91201a4311466dc3efaabf7e8a90f8a0c6113127dcb98; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 22 Jan 2028 11:35:03 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1769081733\u0026tag=53a367ad3d5fa17c9d8ffbbfdd8184116f678eaf; Path=/; Expires=Thu, 22 Jan 2026 11:35:33 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c3ca1b5155fe1cac9b03d6548d6cffe0","sha1":"840f56b27d1e72cd61cf10f93735a97168d5ac0b","sha256":"d7d1f2cb7c1f887aefb5691dc2c396e2efc90a597c50baaea258908f0979802a","sha512":"96b270383436547b18a981a5270bb264f077772a20924f823bfac5fb9a19060de1e95c36c6294bdd9c95ef924ad3efa46121657cd029e98c7267f2d4a35523de","ssdeep":"","tlshash":"fed012cb629579c147fc66c76e164a986c1a976043c044ca12bdd1b95a18826b33b26a","first_seen":"2026-01-22T11:35:33.166402Z","last_seen":"2026-01-22T11:35:33.166402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/components/com_sppagebuilder/assets/css/font-awesome-v4-shims.css?032af75ad5933f9f9a025db2a15c10bb","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/css/font-awesome-v4-shims.css?032af75ad5933f9f9a025db2a15c10bb HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 4197\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Sun, 17 Aug 2025 14:27:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwGjKLqD%2BlsYtIODttqtzhc1Ib1QXtAD3LLv2uIC4XcIWV50PmUZrXsHey2f%2BzvohOGRkkQvz7LxnZyxnh6iiT1HH9eBmp%2BCJpzDwQWU8cS9au8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed37c0723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26519)","md5":"2e4c3da4eae1c876a281d6ca5a7a5b4c","sha1":"92ad084aab53b7aa8c761cd66bdfb1f79b9caed7","sha256":"cfff9ea502195a7b96fe38deca9188a59b758deeecc2cd4e78aea7d911e638c6","sha512":"f324f308649f47e3c25bf021c1776a4326750d04d9392b7f200331e806514b69e7579fb23d7b2107a3b30cb96926554c0de13f45fd1397bdae89938dd52a7ebf","ssdeep":"192:bP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:Ohal4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"8fc20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-08T01:54:46Z","last_seen":"2026-08-06T10:49:38.255942Z","times_seen":2022,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:03.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.xhyEK0_l.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UBTaT8O0MWEt_dmK2EK2GR48rH0n1x5xSIsmuiYx7fGQKLMYDmPDwMqEpZSN1d3z_9a9vv_ao\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\netag: \"c96a39460d2b0a92409b2b92f3da88f9\"\r\nx-goog-generation: 1769073977139451\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74\r\nx-goog-hash: crc32c=pjIEnA==, md5=yWo5Rg0rCpJAmyuS89qI+Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:03 GMT\r\ndate: Thu, 22 Jan 2026 11:35:03 GMT\r\ncontent-length: 74\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-07-27T01:40:34.400213Z","times_seen":18485,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/joomla-website-design-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:12.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/joomla-website-design-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14434\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:13 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMlFiKCQGfRK2BuakZS7qZCpvTKX2raZO48SH1Cm3sHFXlnD7zghdmEpaC8Uu6OGH3iIafbxk5TPbQ0nHIqro8j%2FJAtKz7yPuTug8RnA%2FOs9W4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf2199af23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44e0c45fedfea165f4d411d46c7d33e7","sha1":"18f1f5852e66e13aa324f620559ff23a16e7092a","sha256":"dbcd195425cc16bf0d89de2c521c51982cecad89064ecca020d4becaf6f74d79","sha512":"1ea39367d74b12a05c12bf485420d07f2d76421442ca03630e597ae81ae6c9d27cb42911b3e6ca6f0abc5006ac8252d14a4c53596e74b76c21433581efcc8e4a","ssdeep":"384:a15FS4mjGWhqerd0ly7U6n/pXvTXzOQjYb6qDAsnZYS69TcWOA:Eevrrd0mF+AsnZRpW","tlshash":"1452c07e1fd80b242eee17308d022d777aeb1e1c268ab2c4122e5a1e75679541f67b30","first_seen":"2026-01-22T11:35:33.170022Z","last_seen":"2026-01-22T11:35:33.170022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/joomla-developer-specialist.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:19.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/joomla-developer-specialist.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6114\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:19 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZngfIOjozXv0mCyNL%2Fm6J0SeGbRy3xOpVfjQGpt1SrkGAh3XywpXROlgiZQYhqJ8cL%2FaLy1NYc8Q2SfCrxjeUhLussQCxGugACRyxK%2FtpnGBnqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf47e82723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fc25776266c1d300945afb5b1e79c182","sha1":"cd55ddd8eca283d372d158be5a959c8ee150833e","sha256":"cbb8300a279d6709eda1d333c76530c0b53f083602e6eaf98845e904a3302810","sha512":"a6ef401cfa6e0f3342077d3444367f70f778c96711bdb72373f1dc115ecf4d8fc0dcac1978f625996108a99121308011a1bc27a56cbd52020cfd24f143b6f653","ssdeep":"96:O++1JWBwj5CGwYnLTjtPDFQfL2O4OZ/5EM4gnGADKa78YMncyfNfVu8V8z8oen:d+JYGhVDSfq05EHAeJnlVfoe","tlshash":"97c1af4f63b16e4948a2b55f09249394433c1d7877ba0cd84b094ef226fba5e0839457","first_seen":"2026-01-22T11:35:33.171839Z","last_seen":"2026-01-22T11:35:33.171839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/dom.min.js?5.3.0","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/dom.min.js?5.3.0 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/media/vendor/bootstrap/js/alert.min.js?5.3.2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6869\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Te7ECd8lLLyZSME%2B2JMGosbu4dmXHOLRrs%2F4ffzxH9noS2adOr5NraoOmqP2fm7j0hGtH%2FcqxMxrkAjv9FS7e%2BgbCHrB9YyVudT9bZ9oko7SHZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed67c8923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18838,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18837)","md5":"a09beda0591ecfe63a4b3993c503f459","sha1":"dd263d7adb7fe6229face1783dd6675ca7c22a3d","sha256":"0953ab3763d959cf73d3b10688ef7973499f3de164f9cca293bc8ee553beccaf","sha512":"75bdd202717d3aa70ab4fe166b53e6474f355faf70c5c21d26af36685b53f3fe714d2bbaa406edc01955847c217501cfe19b31b6737aa9003fe5375d2d39ea24","ssdeep":"384:HySPZEutwsvz1ltUH02ov+dFw4lU3Y+VBlEPhnNDGeoCbZGULov5EB9+sjdRfO:HyS5twsv5lmAvJ4eouaPhnNKtWZGULoH","tlshash":"4882c7957189b8734fed05a991365307f2291891b84b801cf87c7eee2b2dd4372b6b78","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.915775Z","times_seen":710,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.CmKqzCoI.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:02.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.CmKqzCoI.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5U4_hByzFL7PgzyuMzpzAttqhlZWf3mwsf3OdKnbuag3Wplj7UnaUICL9rp7IUa6Phl5GWhkS0A69TVEA\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\netag: \"b65a70876993e44c176246d371a29634\"\r\nx-goog-generation: 1769073977139472\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 401\r\nx-goog-hash: crc32c=uAfJ8A==, md5=tlpwh2mT5EwXYkbTcaKWNA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-length: 401\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (400)","md5":"b65a70876993e44c176246d371a29634","sha1":"2cc0d8b7c62acbcf697240d8f66e058f3fe4a8e4","sha256":"b7f86dc1c29845169c42571c402b893b524e84a2a546b2c634b998b8cd42b7b5","sha512":"b487b039481cbe4c29e14f6f2b2cb008d04834457e6c017c016640dc36867aa81b08560f6ca0797b994a73e9df50a7122b73bca225c2bb5489f99ba2c91ed7c2","ssdeep":"","tlshash":"b0e0cacba74038e3f6d5dce5ca04e0e14af323a603e083b0d8de53328325062de41a02","first_seen":"2026-01-22T09:43:26.222102Z","last_seen":"2026-01-22T15:05:12.876664Z","times_seen":12,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/ecommerce-store-shop-website-solutions.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:15.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/ecommerce-store-shop-website-solutions.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8172\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:15 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zR44aMyr8E6tr0vIhMT6b5vJhbdpJBeuHEnbqu8jUBVJuk5WoUVDqIBT%2BUu5VM%2FYCYLDsyqhmFDc4l1Va7OYqN%2BMlDNJCIhOJ8yHipojc0C1Ps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf2edb9723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8172,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18e5771e4d3d4c8fbdfa552c141f97b9","sha1":"cb00af4d0fde0efb2ecdd2ae4712897a75efeb43","sha256":"73a8818fa517f93d90f1f620d33bf84cd819ee6f2f34e23d9570b315e69a7140","sha512":"66231a22ff84926b2f2551f0f4e96a8c746f4e2af038a3c7e152f86d5e027d206a9f56bb067ed1d7de07dd93be879edf961407b8739fad3fe9816df123fb5b58","ssdeep":"192:N3AuV5uyi0CYcFLJ6/hZEaetUi7vhDqcckcW1Oc4:NQuV5lpCXVmi7ZuPWc","tlshash":"0cf1bf8188e490f2dc2a1cc4fd5e268ca02ddd5668e1f2ebf93b6306d15d11b990daf2","first_seen":"2026-01-22T11:35:33.175549Z","last_seen":"2026-01-22T11:35:33.175549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/seo-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:15.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/seo-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15520\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:15 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdASK8QnTR2nYkuJMCA17fF8EAwuoYifG0%2BeenzSRuptx2S%2BazL1vPfdTBqr5GlDBfIvxmxbALZ28cFoTK4w203urOi4u%2B8Dbd28z3j3SBdojnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf323c4123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"375a69d3d8664bffe07a5a665a38e0ab","sha1":"fa0ae3bbdb21a51ebf135f2de69e1c68624dd8d6","sha256":"946cce131959f297a1b31b04ff9aae0230eb0017b29c293ee743ec268af63ad8","sha512":"11656c3a14c00a469fe4a060f82e888510a0c1e5796b727354425ee3e90c12dc7e293d2c52287770880bb7ef70de1cd5d8c0dd36d74ceda01514fbc0615c382d","ssdeep":"384:g15FS4mjGWhqerd0ly7U6n/pXpWeYdo3ehnWazGV8/b/pmCtkX:uevrrd0mbYdo3ehpzVW","tlshash":"4d62d1567f4f0a286de35770de43595f11ea3ab01246524a296bfc0e88979831fdf330","first_seen":"2026-01-22T11:35:33.177337Z","last_seen":"2026-01-22T11:35:33.177337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/digital-marketing-services-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/digital-marketing-services-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4424\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMEtLdP4sDCVAzqIxyuR7fm6HQtznMsC8AXy%2FyDfbLPyMYHd8VZavuyNt2tf2RBrMKNLe3mscm3aoqCBcPjX7g3OUjp%2FDOzyl2e8TOZR3QS5Fys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf385d9223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6634db553ae4b6b36a8dac64df5f5b9","sha1":"755be8b6445185dc90116ee067e16e89147ee1e3","sha256":"614e66db60c8328a01e5681091237ab03745494f23213b4ad639dafeb5e5e362","sha512":"215211cfe794db86e7e8a6cae23f240c5be30b406f59a7cdf471f55ee574dcfe2020644139cfdaf082aedb122965ed0b8c91c59907af46d4f1779440032e23c8","ssdeep":"96:4JcxV270WAmOE1lVi+xHaITTAvWsGz0lx+y8cx6sbjvEt:xK70aV1lQ6TAs4wcIyjv","tlshash":"3d91afee4160923d5186569de6f523118a9c73fdd69c8c847b1dc01722eb0401d39b07","first_seen":"2026-01-22T11:35:33.179051Z","last_seen":"2026-01-22T11:35:33.179051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/cms-website-design-services.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:19.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/cms-website-design-services.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6150\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:19 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HGfaPdzNXD9UhW14%2FX51vdjlQmBSWeh8o8NA1CTi2YxaKF9uNlUt9ez6Ch84IUZrm2RcG2LS89OPCcMSupTGq8%2BddFGEM8eNfUiwDo6Ed7vwxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf47e82623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 238x238, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"577201caed835d8e2ca775ed81300b81","sha1":"61fe6e409df865f8a3f069a097839a956f108b93","sha256":"923250cebba72939bff871ac21465b5964c33e752320c735b90e8e2be7de9b68","sha512":"e5b782c8add982c93f41791f2cb7f9493d1ead302c2166036ee2664340a414e1535f45a8543a51771801d1ea8ae0915fa17937e48200cdd28dd2141b92c6b4b9","ssdeep":"192:fXU75QqfNk1d+CmpY+ki9t9+2yDkGa0ubu36MR:MtQoaDmmU8D3ubJMR","tlshash":"e3c1af404e6bb136a08499bf62b2cb59cc4dc9bb9309a24c8ef3d8f12d41c0e5d7948a","first_seen":"2026-01-22T11:35:33.180737Z","last_seen":"2026-01-22T11:35:33.180737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/blog/37/b2ap3_thumbnail_losing-page-rank-and-conversions-do-to-ai.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/blog/37/b2ap3_thumbnail_losing-page-rank-and-conversions-do-to-ai.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 185156\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Thu, 11 Sep 2025 22:05:17 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtRYoSmTPPLbwMAS7Bqx9uWEjNW%2FrtH0JpKE6jSeVfBVoz7NziXDaRrpjdmp3oDDu9qjN3dTtY%2Fv48902FhYhkfFCHMdPx%2FHLuT%2FAFMImwufvr0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed62c7123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 274, 8-bit/color RGBA, non-interlaced","md5":"e5ae4e1cc03bb74d02881ae2205f0bd0","sha1":"c625584285dcab44f43b181c9e48e005be69af9a","sha256":"8c0dce898ca42fc3ff8ade4731663889ae340bed61e63c817a1957f785a667f2","sha512":"ac4d9ad47d04d0b3f9e8975c8fbd9bc1b8f1c9d320c77033e35aacf0abb9e2d88b4f3aacf56b98aab858e400e3f4eafd137740aec331b1ccdb0066cb82ad5958","ssdeep":"3072:wzJ10iI9aEPFkI0VFnq0CxA3CITRiwbNxRmYoMZ63Bg1Zyjb24nYi4jYWJVp7a7G:eJ10aZBVFnq0Ceygh1MMZ63BMZyjb242","tlshash":"0b041216cd1c6a73aa0debbe75a184c04d493972d23f7daa3c938a1463c673db7c8518","first_seen":"2025-12-20T03:33:37.919348Z","last_seen":"2026-01-22T11:35:33.182713Z","times_seen":3,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/media/com_jchoptimize/cache/css/af1b1ea97835a50ca7649fc0599d6b04e33b4ca59a6445984740eb6c00e3ba16.css\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ND8v2Q2KMdk9qYecSxRpRJSBqtw5Xz9fNGJ7gf46TjLavInmd3Q1n5SHbjpRc9sODQjt7GbZVPMxBVZ%2BguEf3ilhhKzqzRP8WMMfpC0%2F5jSbHAg%3D\"}]}\r\npriority: u=4,i=?0\r\nexpires: Wed, 17 Aug 2005 00:00:00 GMT\r\nlast-modified: Thu, 22 Jan 2026 10:52:14 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncf-ray: 9c1ebedadd7723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":356695,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"a0237209410f65404e9b5d58f37b6010","sha1":"936b771dd6d4cfba63ebab5d0a8e60f28ac44aff","sha256":"344fdaef4a7fb6be7a8c67d0001e6c8aa66d6c82ede0b50597c19f926c09ef71","sha512":"0dd61cd4e145cbb82f2696c1225f941dd5eb3db42077f2ac0216e4f1de92ababcb3ac13ed2e9df9cbb36ea25deb9a22df022c1c3362e2e3b54e53018faf9b164","ssdeep":"1536:+H/RZo+nZu9pUIIac2O976BiVQvR3pAtiaWLiz:wJZU9vO976BiVQvR3pAtiaWLS","tlshash":"b77483333802a0bc59268264f5d62ced735de452a74f72f9ed32a4959ace3870233b5d","first_seen":"2026-01-22T11:35:33.184411Z","last_seen":"2026-01-22T11:35:33.184411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/opencart.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/opencart.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7329\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcwA9W%2Fs2T%2FUXFM0lO0n5Y2N0WslDhTXyJ0BoXDCzGVbijLOjfpZkDBOSTVALSkNVhCOjQB3ug29DwXY4E%2B%2FpunlLS5lg5bpVvGLouBs0xaShG4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf19f88a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"c682f438671018a9fa9219e544f4d1a4","sha1":"77b3c8b773810979e61f197ca48ba533dfda1f06","sha256":"e9dddd1faa01f140c126dad526e38c772707eddedf2729560612d215e276ff98","sha512":"6cddc3154917775ea6eb6fabc41873b3825d11179ef037909a124df01809665046783919ce3861450e8a48b5e8e90adec3799d48af2e3825740adc673e76787c","ssdeep":"192:bSqVknDi49udt966TSF6WkU30aSkl4vyI:OqmnDz9Ytw6Tq6cN6KI","tlshash":"2ae1190e3e92b800864cba0966ddb091d3b70fd44e95920befd999878c518e9ccd89d7","first_seen":"2026-01-22T11:35:33.186199Z","last_seen":"2026-01-22T11:35:33.186199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/website-design.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/website-design.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32652\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gn1tAiR9y2nboPyXKujq6z9DtPxdCFJE1upItJCyMhp3em%2BWzsyZl%2By4uG%2Bv7A8aftX03qygtDq1wshkZuPW04VHWEUHYj4OZkclC09mGKBdyGI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf35acd623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":32652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d75d3e70032f596a66a8050fdcc18155","sha1":"809aeb0541112c5b0c4388fc00ca8ff7d882edcf","sha256":"262a2aadf4ce696b3f72ff7b3b2dc659b39109b9635700f1124b5dda75e65389","sha512":"01faa3b419459aa7e9020814f2372cd931a4066ebe51cd8ec81301320ee11b4b6c1dee6d33f2c73dff8775ced12691f07551b916ee4ea57b77509a232425d55d","ssdeep":"768:F9gnl4qw3v+ooplYFUUG/bGk84+oO4I/38fiDg/:F6nuuUUB984+p5Dg/","tlshash":"abe201a458b850de6cb49771a13669e43529c48cfccf16f33399533af47148c137e4a2","first_seen":"2026-01-22T11:35:33.187871Z","last_seen":"2026-01-22T11:35:33.187871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/web-development-in-kc.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:16.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/web-development-in-kc.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6414\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:16 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rjmw3QnlGKJq2kJMTNySqWWBMlrmiEEMFzLpdEwFHAy0aL1ER1ya7SKXeqAAjRPE0103wy2VqG3YsOhOsvcM1qFf5pZy6hz4zg6S%2FmdhVer4ahA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf384d8c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45fe5f138575d1c6cddef0be3d1f2478","sha1":"df577eb579ba277e8fe352493315b1701042cc9f","sha256":"0c59dd3e508f75a0170fc8eaa4a29593515071d1a8a412025106f7a413f3086b","sha512":"5338a05aeb7a025e136cc750400bd959d1bc1ff67d45a1875645199a216f61379afb954071ab20d071f6600a9725a9a2ba6db40a394e082d144c955ad7e7a802","ssdeep":"192:6QliZSkpeTzJEd5si8BK/+pEJhriQEsiEun:6ci4GeXJEAiIK/DJhriQviEu","tlshash":"5ad1aed488e01b857b50ac91e76ec66b4ec4bc2be8798954e4f5c0d2d4405f7b43f218","first_seen":"2026-01-22T11:35:33.189574Z","last_seen":"2026-01-22T11:35:33.189574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/jquery/js/jquery.min.js?3.7.1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/jquery/js/jquery.min.js?3.7.1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 31398\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QSlkJhk%2FCj0Y5P3dJqux7qNhMqM9eQgJ6ZKp4z2F2tZa42kf6fvNVb6%2B%2FUhpGLyDzpfcz%2BzyYac4jHaMBFJsm1G3%2FvVVymfQ3V7Eay9o7MOUgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3cc1323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-06T19:51:22.003153Z","times_seen":184291,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/system/js/messages.min.js?0b6ee2b15d1812bf231ba577bb7488e3","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/system/js/messages.min.js?0b6ee2b15d1812bf231ba577bb7488e3 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1806\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyxzZdNO%2BNup5Y%2F4kJhub5n41d5idx2kzJwlTyBbnOcA2%2FmYnoP37X2uIdhD1CbU9X4AU44gB%2FKAt%2FlpDAritbPriOdfNgr%2BsS2pQWsDP7xjnZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c2d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5598,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3934)","md5":"7a516911b85fdab5112f9684d8b6046d","sha1":"7f7aa28ac8e8d42145850e8b45b3bc82ff9a6411","sha256":"251b55c8dbd66154c2163ee5e53808c394678405276d6ad5758e848ccd1d37be","sha512":"5e77989e1fd16e50cfd40a1b5bc870a39aeaa3665f5b3d719f43238598d6ddaade4f1450e743b36e942af79f42a27151594b41004c2a7bcf3adf0b1fb95dbc25","ssdeep":"96:wqTRfG2U+hx1jgkY1iW3geER3M9hVv4Dl9dFQIeMCkRH:wUe2/+kIiW3Q3Kv4DlHvCkR","tlshash":"fcc122e7e2572f371bc8d289602d2a81bd1a6051c02f6c2c765cdceedea9d40257e732","first_seen":"2023-11-29T12:15:38Z","last_seen":"2026-08-06T11:08:36.890259Z","times_seen":1410,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com//images/joomla-wordpress-web-design.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET //images/joomla-wordpress-web-design.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4572\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Tue, 05 Nov 2024 22:22:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZImdQ%2FwdW23bgM%2BQEf%2BOjhFd%2FhalqiXGZDG53yGHGs8Io1TrKrDw5TopXcVCNxK0VWrtiLlY%2BUYNH2DyPTsCZ5JjGOwslFgINsJqYZPb8zBeiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed99d3523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f49cdfbbc6bda31dbfcc23e92d293c4","sha1":"becf79fd183605b6e47840223c0e2d2ac20105eb","sha256":"6f4516b5a7a83235d97fa4fb32b986eab3351d90ebaba5c03e6fb48e47e47adb","sha512":"6f1cc094a5c124320226f220d3a884a2cdf97b54e4b1f8a3e8bf2f610193da0c4e38d858825bc0acdf8a7a78d9eb5c00df65ea4779308c2a22154cf4577fb250","ssdeep":"96:MGQgC1hgL+7CPrGiG5yCgPrgQv3PhyBr+qaMfycgNY:egSASCPysCgDgQvJKb5fyX6","tlshash":"cf918e5375c1e935c08e441248b37792d5c7e0daba8f8b1a08983c9a1132fdb8f6d04d","first_seen":"2025-12-20T03:33:37.866326Z","last_seen":"2026-01-22T11:35:33.192495Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/?option=com_easyblog\u0026lang=\u0026Itemid=121\u0026_ts=1769081701263","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:01.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"POST /?option=com_easyblog\u0026lang=\u0026Itemid=121\u0026_ts=1769081701263 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 134\r\nOrigin: https://www.theturngroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":134,"data":"tmpl=component\u0026format=ajax\u0026no_html=1\u0026option=com_easyblog\u0026namespace=site%2Fcontrollers%2Fbase%2Fcsrf\u0026353742c4737867e2791608befcb4ddb6=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: text/x-json; UTF-8;charset=UTF-8\r\ncontent-length: 84\r\npriority: u=3,i=?0\r\nset-cookie: 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; path=/; secure; HttpOnly\njch_optimize_no_cache_user_activity=user_posted_form; expires=Thu, 22 Jan 2026 11:50:02 GMT; Max-Age=900; HttpOnly; secure\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2Kx22HDWld0kIngQpumOZ4fJkHSiUX50r4gSggsAe3KC3TohPbBW2FsTUIesNtneAy2m1814NCsRguBHQ%2BxQR21Jbu%2BJYxIF%2FlE7XbF6TOl6Ek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed99d3923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":0,"mime_type":"text/x-json; charset=UTF-8","magic":"JSON text data","md5":"99dc6fd7209cfe5b314889d2c662d6b0","sha1":"d130ae2f2bed3ee6f06c575de9a298eab2786fb3","sha256":"a2b7a7cd7563fee0402436c7c10c0f2eed7f2f3de5a05d6151c26d28a0981cac","sha512":"d121e6b1dd32507c4d258dc160b05364db6e2d66d7e96445c8e6c9bc71d3f2dbf9113ef85e251379bd8ad91c5de5a1bca8e7d6130d1762ad03620609de5a421d","ssdeep":"","tlshash":"99a022023c203e033bf02e208ebccc8083ac0002e28000022cf0c833c32f2283ca0300","first_seen":"2026-01-22T11:35:33.193967Z","last_seen":"2026-01-22T11:35:33.193967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2XNKCDX8CP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:14 GMT","end":"Mon, 23 Mar 2026 19:51:13 GMT"},"fingerprint":{"sha1":"3C:DC:21:26:F8:7A:33:10:B4:84:83:99:1D:39:5F:67:F9:30:F2:0D","sha256":"7E:B2:4C:28:28:AF:14:76:E2:EF:78:6A:09:B9:6E:FA:C5:87:B4:75:A2:86:A8:E1:C7:BD:AE:A1:73:A6:D6:5D"}}},"request":{"raw":"GET /gtag/js?id=G-2XNKCDX8CP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\nexpires: Thu, 22 Jan 2026 11:35:00 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150533\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459681,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7828)","md5":"f295d7fe0bab857ca72c08769d12dfd5","sha1":"cf49db2a3fc66a121cc671e667d7a36cdcca0373","sha256":"86c608609a8bcbda5bd3755fd81361a26ffc7bf8131898418657d7e565d06386","sha512":"a61412260b6f492f52c747d00fed9adc96a9b626beb2f08e5059c4a7b7e17d5a027dfce1769ad9a5801f0b25e485650a39508eeb05bb56d48314b3cd3d2fa2f4","ssdeep":"6144:XbzXo/RhdBAhJZEXOEsrzRUKE7K0go3VLXgeRIBv0sVZHHx:34//dBAhJZEXOEAJE7BIB3x","tlshash":"47a408ce73c674269396f478502f12cba97b25a2b49dc89ab1c9ccf02d3459b4127f78","first_seen":"2026-01-22T11:35:33.195392Z","last_seen":"2026-01-22T11:35:33.195392Z","times_seen":1,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":99,"dns":0,"connect":16,"send":0,"wait":47,"receive":52,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/blog/36/b2ap3_thumbnail_cpanel-ftp-login-issue.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/blog/36/b2ap3_thumbnail_cpanel-ftp-login-issue.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 61235\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:01 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:27:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ytoMTCMm5vaz1V%2F5Wqa2CF2XN1zyyZwDcKOvrxpKwJ1FN6JhUP38LxYamjaYH3hVEH3dEeFqnjnyTf9sCodNYihhdwJVULHksNnfLpZqo1SnOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed62c7223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 274, 8-bit/color RGBA, non-interlaced","md5":"db50fd4e3beaad255b9078a5455aa343","sha1":"27a1c0976708bc905b23130e0b57fbd87ab8e1e9","sha256":"1d0a454c2e240c43b9f26e6a28b7a615bd8f16fc86d5b9edea894899d5fa95a1","sha512":"4fb92313a55e2f0d1d9071b263c4daeaad9d917ba6e96506f97350684e5665f9c65e8c59e8f806a74e80dd632b730feb1d59f2e2a3f50b9d339b5721ac515b26","ssdeep":"1536:MK5/T2im/GFSK/5SyReFHhxGcLQMt7tRBiJeTk8e:MW2iY44yReFHzbLQ6WeTDe","tlshash":"e853020c59a3dcbdde6ff8fb901840b186ab87e95f6a446a130ff211c13c225528ef65","first_seen":"2025-12-20T03:33:37.946354Z","last_seen":"2026-01-22T11:35:33.196697Z","times_seen":3,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/portfolio/cms-platforms/concrete5.png","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:11.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/portfolio/cms-platforms/concrete5.png HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7283\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:11 GMT\r\nlast-modified: Thu, 07 Nov 2024 17:21:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhjvmEWRUeSYz8TiDFsftBFuTPCPRgOfIhOUSJV3yGQSgP1xNJmdBzuSFggyjHpB%2Bs%2FHs8OAsy8szPqZrLq6%2FCJR8A4P%2FucBubMcPO9zophydvg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf1a089023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced","md5":"027d6ff2cafda92d3d740b9b436dcd97","sha1":"78399c35db994f4c7c472083705c1bd5e82e13c3","sha256":"a3f5d2324f9b77c742c28f17b4d2f7a1a8ec8994f37031bc0f2a3bf6c4e9108d","sha512":"32c0d8759f55abce5353f628ed50e967e85f3892b5a3def4a274d1489db387326b8bace0fa88e68aaf848bd5a5fd844f34ecb653db7335f14389d48d5072b830","ssdeep":"192:bSpVknq6ijN9adt9Ze1AgvotlG4ZWF7pARAPT87xr:Opmnq6IN90te1Atl+F7CwTU","tlshash":"87e14c4a7e9bec00491cbaa955ec5192d3e71bc05c90e04eaffe48436d918f9ccd66c7","first_seen":"2026-01-22T11:35:33.198234Z","last_seen":"2026-01-22T11:35:33.198234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/foundry/css/vendor/fontawesome/css/all.min.css?7e64b8be04f0d43879fadc7326fad717=1","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/foundry/css/vendor/fontawesome/css/all.min.css?7e64b8be04f0d43879fadc7326fad717=1 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 13007\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Sat, 23 Aug 2025 15:10:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3f0rW798B2SBI6ufZDQWi%2FaHzr1j2rnPQkO5wVGTl2V43udGLP%2FwkjegKsqrd18QlQc0%2BmNsPNRfM9RcDoJy051eY6dp%2FudZSK9Z7naudU5%2BhL0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed37c0823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":59630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59241)","md5":"7535b2706e5804f73c44f1b5b14fc014","sha1":"4183e83264dc7943aeb703e59f0ad4b3d24c4da5","sha256":"90cfff35e93e3d819d4ab3394d7ab724ca037fa7c2e7dd4ad56211e9448bd82e","sha512":"6f84144c3d420d27d91032b463a884ad3e44260e59e68d586425773b5a469abe3747ce8e77b9a373b2b1a586a30644d1a613ea2d5cf441a4f90cadb6e02d20e2","ssdeep":"768:03h31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzX:030PxXE4YXJgndFTfy9lt5T","tlshash":"b343fbb8e54c01cab731c44bef81b2bc61baf73de5914d95f00e591c2ad26a811c5fba","first_seen":"2023-05-09T19:54:28Z","last_seen":"2026-07-28T18:47:55.294252Z","times_seen":134,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/com_jchoptimize/cache/css/af1b1ea97835a50ca7649fc0599d6b044624a6763ccd83dfbf9d9c055d65c7dc.css","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/com_jchoptimize/cache/css/af1b1ea97835a50ca7649fc0599d6b044624a6763ccd83dfbf9d9c055d65c7dc.css HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 6089\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Thu, 22 Jan 2026 10:52:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSz3qwz8RoN8HrloTP7fGjSRJJxzy7Y4QTo7AGeD6SblZsZCH%2FPdkSokKfoGlLckMeUSc2Rbg%2F2esWg68hG1BUU0ljdBqii70pZKxR8W%2BODPx70%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed3bc0e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91266,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6191a5115fa6d55c78c6c685380005f2","sha1":"170403068bf41ad46e3ce3e1ffc6838e9f389e7e","sha256":"8a00c4362f5aed29852757d518b73e6fb2e91f8a7c4a7986482733f9e07ba603","sha512":"57a4d7d78b35a29fe0d4345f3f4e4e8d6ed7fe8cca8c1ef5703864859a2da33e6a279dbadb0423388f54f6283c5bcdc7a70ab600a9cd3983e78bb3922a91aef1","ssdeep":"384:OINIObYgf6X6vP44FFOO0o1oHPy5d57bybesFsrK39gROsXzqUXEq:OINIObYgf6X6vP44FFOO0o1oHPgsFsL","tlshash":"bf93e7ae4991128990164b96dbdc5ea85b2dc66324720cdf3346384b8f87fee33dd643","first_seen":"2025-12-20T03:33:37.881465Z","last_seen":"2026-01-22T11:35:33.20029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/cf-fonts/s/noto-sans/5.0.18/latin/700/normal.woff2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /cf-fonts/s/noto-sans/5.0.18/latin/700/normal.woff2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-length: 13444\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3erpBT%2B%2Fa9US%2BULPQWO67n4C1nJduRwEnQjGWZmQ8R9Oy3xYs6NRsPd95OIaHjHRebWDtQ%2F8o%2BomZj9e2O6H0YEcLpQwHBgxsTeLPB8ZHRYqGo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c1ebed62c7923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13444, version 1.0","md5":"90894e9e092aee649a832b670d752339","sha1":"f175b9d8e73ded3993b44fc6aaea177e2df25e47","sha256":"f81cddbd38deb95a01750bcee7131bb0b03f7d2f1c5341bda406e5d2e8c0afd8","sha512":"dd10e09c962ddc6e9de5a5d6fb95b82bea1e46d2e4bd959abcbfc816896140c6dd69301fba732a5ee54bef868345ecc7a5406dbfd4e1dfd42085f2dc574af213","ssdeep":"384:tZrqf431/TbA2ZbeZjJijZoiFxPto2/3ObX8:7Xbb1beZj8qiKhbX8","tlshash":"f252c19d30965e4bc42749ffd269440cd6e26971588e0671fa0ecc8ac12e9e13753dfa","first_seen":"2024-12-09T17:37:27.659034Z","last_seen":"2026-08-06T01:45:13.538384Z","times_seen":397,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026version=2127.0.3.379.7.46.8.6.7.7.6.24.2\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:02.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026version=2127.0.3.379.7.46.8.6.7.7.6.24.2\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1761\r\ncache-control: public, max-age=600\r\nexpires: Thu, 22 Jan 2026 11:45:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5943,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (5943), with no line terminators","md5":"a6b063539f324578673c3cabf54a3f0e","sha1":"4a778504a399e4c6a4b55f93afc4a42fe6c91a0d","sha256":"6c10cc1bccf6e2e4dddcc92df745c96ed2aee69bb3723000771d2a8a09a87f21","sha512":"f1c69913a5a5615948ce1959d15aa90b73d7c67b398ce9fe92e1a3e8d829ba407c5b56c7288dbe01a225ee9d697e07f1463d72724d6e704a9de4800ab017b32e","ssdeep":"96:s5/1RDp1hQ08wt017RxruKPJwI/EaKtJuN7BTGbmTg3PJvCLq:mTniHRJu+d/pBibmUxK2","tlshash":"f2c14419835fc87f6363915a32cb7b0a74494178b5e8593bd4b4ca70a1871c7d207ead","first_seen":"2025-12-20T03:33:37.913927Z","last_seen":"2026-01-22T11:35:33.202805Z","times_seen":3,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/images/joomla-developer-support.webp","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:18.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /images/joomla-developer-support.webp HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nCookie: _ga_2XNKCDX8CP=GS2.1.s1769081701$o1$g0$t1769081701$j60$l0$h0; _ga=GA1.1.1763336440.1769081701; 5d30b6612dffdaa327122bd3ee078756=ee2a1f60bccea9df7fd66dd78c9042ed; jch_optimize_no_cache_user_activity=user_posted_form\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3280\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:18 GMT\r\nlast-modified: Sat, 23 Aug 2025 13:41:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2UNAAZqUvbER4jxuyHGDUXufh5Xph%2BRt4pyAKV28OL7jatCYPyJl2S8YpAkTL%2FLrtPps84THMIMswiWr%2BqKxERRh01LXY1EMGQxnBPSAScWUmc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebf442f4023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed4c3ed975ef6e1994d80fa324297292","sha1":"a5bdda575058254be9cb8bc2a5d05decb2a4f8af","sha256":"aa697186ff7fb14f7809f6d72cafb115a31cad8d853795dfd80b10dcfdf71457","sha512":"fb83d4078ebf4dc63ca324c1ec063a761963e1f96feabb24acffc21d414cf9140559d4cecb11dc559b0f8bacd5636506aa6c73156a8ef76d1da16a321366a525","ssdeep":"","tlshash":"9d615ccf53210cc8270a573b56a0a91d469591989d102d4a4c36671bbfa0db6943f175","first_seen":"2026-01-22T11:35:33.204786Z","last_seen":"2026-01-22T11:35:33.204786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.theturngroup.com/media/vendor/bootstrap/js/modal.min.js?5.3.2","fqdn":"www.theturngroup.com","domain":"theturngroup.com","tld":"com"},"ip":{"addr":"104.26.0.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.theturngroup.com/","date":"2026-01-22T11:35:00.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theturngroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 00:03:28 GMT","end":"Fri, 03 Apr 2026 01:03:15 GMT"},"fingerprint":{"sha1":"BE:8F:33:DF:45:21:A7:62:87:26:57:08:50:01:E2:7D:15:C7:4F:0A","sha256":"30:3E:37:9E:59:97:19:9A:8F:10:13:03:F9:B0:4F:44:B3:20:B0:0A:22:A1:3F:18:93:46:9C:D4:BC:C8:EB:82"}}},"request":{"raw":"GET /media/vendor/bootstrap/js/modal.min.js?5.3.2 HTTP/1.1\r\nHost: www.theturngroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.theturngroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 11:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2550\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 22 Jan 2027 11:35:00 GMT\r\nlast-modified: Tue, 23 Sep 2025 21:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FXP7%2FVlPwr6usQW9pKewVj%2B4ybTcVo6bLspBzOHAo0kMfuc2aLHi4Hz2LgfnmYnMwkLzI2kWCpKIL7h%2B05vjvbIwJ5LVerKY%2BiLTpr98siBhz8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ebed40c1e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7145,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7144)","md5":"de8d4c05ecee57d9cc714e2a083aacd8","sha1":"a7b74b3c0e0f628c79d2fff346b1fc79291f1a48","sha256":"d8f06e289f25df0eff3941e9ac21e652c840e6b39cd7cbe4f8e1502123400352","sha512":"62c1226be80020add13704c6d4b933201d8e6d706791a6232b732a2dd0a0e7718386859de5db716c6ea24ecd66113b5fe97ca8125c1bcc7a719d575b9484da01","ssdeep":"192:W3bnzDDr3MyiqtZgUgVc3ZkTDFP0k7MVuFu:W3bDr3MyiqzgUg9gVu8","tlshash":"8ae1b59a33191c324acd85b3a1b64bcbf2244e99ba05465c383c5cde196cc863277ff5","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-08-06T11:08:36.888959Z","times_seen":517,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"www.theturngroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.CXYql_Yf.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=11648703\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=cbd914d0-61e1-4571-b996-e7c6407eb015\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-22T11:35:02.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.CXYql_Yf.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XPClldIxaQ7hV8XGAOoIKWupR9j-0e49twNugOLIsmFeLCxvRKzLctacDQIgY6oZU\r\nlast-modified: Thu, 22 Jan 2026 09:26:17 GMT\r\nx-goog-generation: 1769073977049111\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74971\r\nx-goog-hash: crc32c=wE9jaw==, md5=PFCX4NprMOdr2cn16sUF0w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 23313\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 22 Jan 2027 11:35:02 GMT\r\ndate: Thu, 22 Jan 2026 11:35:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":74971,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c5097e0da6b30e76bd9c9f5eac505d3","sha1":"451a2a2b0116509afab72ff52ed803ef9de39c40","sha256":"a88097a59800c215f71fb94d449c241972b7612cd7e990c74dd5994181267d5c","sha512":"bd947ad887a2c99c7d870a079fb9591d2dee2becbe866f6dc851260c6b96d867578951b64d9ff3902749d938a37ffd47ee55f88be48c47cd827ae96c634c4d1e","ssdeep":"1536:xZVvOApL0+ZhRp2rNzX4y5VLpKQXGv2E3O52zkT3xJ9c7Pw:xZLLxZhrUVLpv2vS5w49cjw","tlshash":"f47309d2f291f5399bd7a8e551285003fa2639587c5cc270f32cce24219e6c6a1b7f6b","first_seen":"2026-01-22T09:43:26.261382Z","last_seen":"2026-01-22T15:05:12.830879Z","times_seen":12,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}