{"report_id":"c73172f3-24d2-4233-87c3-8e399f83d53e","version":6,"status":"done","tags":[],"date":"2026-01-28T20:06:34Z","url":{"schema":"http","addr":"fassets-oraclehosts-daemon.com","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"title":"FAssets – Bring XRP into DeFi","dom":{"size":116459,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57073)","md5":"4b868c180d41955b630ac43a5f0b2cae","sha1":"4e1e098a200f58392de8531a047f563b730381b8","sha256":"eb691131e5b8f5a3d00d7f8b973e1a8e260fddded64285581172f09b0e38fb5e","sha512":"ddca13858bbc6f203360bb46479d5f0b938a33c00091c89e0e844c9fbee86af1a2dc4014cf13f41d06b505b4c90755dfd318c79f07f90d6e76a91c69573c97fe","ssdeep":"1536:PonAlnXp5+j+4HfiJiTChypWs4t+ogJSrq7oQMGnoc2fUh:PXkcs4t+ogJSgoQMGoc3h","tlshash":"05b3c76077a0157a263b43bde55bf60c65284623d64ea7e5f4fdc09c85c9fa320b270e","dom_hash":"domhash37901181921feb37b5524dd8d6d7f4e9","first_seen":"2026-01-28T19:28:45.656895Z","last_seen":"2026-01-28T20:06:40.018635Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fassets-oraclehosts-daemon.com","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T20:06:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fassets-oraclehosts-daemon.com","ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2026-01-25","domain_rank":0,"first_seen":"2026-01-28T20:06:35.09123Z","last_seen":"2026-01-28T20:06:35.09123Z","alert_count":56,"request_count":28,"received_data":814193,"sent_data":14217,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Elementor:3.34.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.8","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":3,"received_data":121257,"sent_data":1719,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":4,"received_data":140487,"sent_data":2316,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-11T05:35:44.11769Z","times_seen":200970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","size":15525,"data":"","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-08-11T05:32:36.542103Z","times_seen":17780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","size":25965,"data":"","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-08-11T05:32:36.534913Z","times_seen":21146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.34.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"5888f03128a623fb08d9653d68f99419","sha1":"ff37011866a3800c26ada8eaf23e9ceb3f182903","sha256":"03f0b089cb9d247bd10c8efd03e9a3e4ab69dea20e1ee90d370776b18cfbae68","sha512":"ba4e544530365db79df20e327b0a2cbf951e319d8ce8f0e0bfc60b426b1f8b32db43ee7bfb7124df38a583c9bfcf95627dddb10d2932e88c4f17352d1b387c72","ssdeep":"384:1dGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN74:vR+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"60b2d9063163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","size":24048,"data":"","first_seen":"2026-01-21T13:53:51.827531Z","last_seen":"2026-08-10T21:18:53.117455Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-11T05:41:51.473987Z","times_seen":150625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T05:56:20.447278Z","times_seen":1014021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T05:56:20.389287Z","times_seen":928954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1e61eabb0c508a4034e9463f5c21415","sha1":"447d61fbd289f19c196dca6db57fdabf396f37ec","sha256":"14a0347940d8cd4bb00302adc1f0e7a52331a4e1453dbca140e5064622f4d1ce","sha512":"f0d5eb7750e9bd24c160562d63b62a3e8fa761d0e9e9dbdc522c1ea848868eb301bccad139ac58e713a32abe4c899064b7c179ac43ccf87eee0d9a1b23322426","ssdeep":"","tlshash":"1bb092b502e0952705ba055ba8a7e609646098216ab7b168811cc32c8872ac01da1bcd","size":119,"data":"","first_seen":"2026-01-06T15:13:01.552784Z","last_seen":"2026-08-10T22:37:28.191568Z","times_seen":10506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-08-11T04:45:32.932973Z","times_seen":70844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T05:35:44.128993Z","times_seen":310852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/elementor-pro-frontend-js-before","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfa0c3edb134e7e10c20e2703161189a","sha1":"c88b72af040ed282a8f9fa5777baaabac34810e4","sha256":"4403e79ce6a7d18b8a56721174082f3b2292cd84f1dd9d744fc245cde4be2d60","sha512":"ae27fe6ee560f9032637e29455aeb05767dad6dbfb4efd3fdd69423cbbfc2fa06a4c0a02d1831d537da5a0f0f5a53911d9e18b20a878ccd2ad2bd843b32dffe4","ssdeep":"","tlshash":"5f31cb16ea611e2493aaa2f871cb3aaf48800333d5d4f90d16a9e86400f7c9ef0052b7","size":1742,"data":"","first_seen":"2026-01-28T19:28:45.689339Z","last_seen":"2026-01-28T20:06:40.103132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4628124e08ff82925a688abc2b29290","sha1":"8a621df63373888ae664c46172f091862961bebd","sha256":"abbe86f75080a649a3ce394b647470e3c0dc0c5f2d9193e53e01e1e1710d01de","sha512":"f4bd654ba3ef41ff8d77f5ed59bb488279ef38e3f3d0c90417a4698dcfd1e066b910407b3fbffa4f6f84565aca3ba63e7df7680d51b5c58137bfafa3f7a9ca38","ssdeep":"","tlshash":"91511e84b4f3722112a371beabcfd91977a454235448e640fe9c83453fa4a7493a2fc9","size":2455,"data":"","first_seen":"2026-01-28T19:28:45.691724Z","last_seen":"2026-01-28T20:06:40.103919Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.34.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"75335041fd6f5d627ddc3475811aea8c","sha1":"8c3199226b96d5889bd4398d46ac209eb1d0ddef","sha256":"31b996586b2f1ca12e0aa6f59393364c7ba328449643d621a91fbd742aeccaf3","sha512":"0838bd06fc600eee50bf09a3bac2cc4815aab592ef0a913e4a2d83d7b3dd27bfad8591ee0113895609e49074562ad54a2b30708150c9b1551e88a60d32f1b1e2","ssdeep":"768:3/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7La:ftDD1+WE9A5yLcWJ9mBtIoERuWfRMBK7","tlshash":"9413955171aaca2941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","size":44259,"data":"","first_seen":"2026-01-21T13:53:51.822148Z","last_seen":"2026-08-10T21:18:53.209793Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/astra-flexibility-js-after","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f436ee02c5b37122f874a56f5985e054","sha1":"8fdef23d38aa3660c50ab74ef664b0a28870e7db","sha256":"638ed9fd709a67466f0ed0438aff911e107ad700bb2d3d5101e9904e1de6b868","sha512":"e486ea9de8298574a1e7081127f610ba34e8bde946d266fbec9f3752fb8ac5ea0afc653715bd7bac8698b775b4ad348b9bad93211125af08b1fe2269eb3c1e68","ssdeep":"","tlshash":"3bd092b5c2e0a52705bb097ba8e7e60964609821eab7b168811cc32c8872ac01da1bcd","size":203,"data":"","first_seen":"2026-01-07T00:33:36.00258Z","last_seen":"2026-06-19T13:05:39.489129Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"8677d8dfcc987f7d42b832b5ec35587d","sha1":"471ad10036d5aac3064d12441eeaffa05340e4b5","sha256":"b4bbbeb410140adf0ad76bf74e2a6525427e7fd867020599bcce5ce6c724646e","sha512":"ff8c780d9d829ce12e12f10f88fa2b4d970416aea6474c0465e184d78d19e2bbe450869004403e5bf958b394834998ac4d7ee037fed8a2425a92b994581997fa","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5p0m4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5WmH0IW9v7G/2","tlshash":"68c152941694fd2b21e139d8e01b9735252ec1373c1af981fa32eced54e4ed183aa532","size":5677,"data":"","first_seen":"2025-12-12T23:30:14.897515Z","last_seen":"2026-08-10T05:16:08.348445Z","times_seen":24663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/elementor-frontend-js-before","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d7e969615aef2ca6279e3ee27c6296e","sha1":"44f560ddeba800be4c04eeba95f969fbba8086b9","sha256":"0438d94336f0dcd5e4c54fa2acde4a02458779cca27ea86bf094034ce8feca5e","sha512":"219e62f0f2e57edcd603f20488df8d67d0c27586c55f8aba893dec3478896af0bae744c8df188cf6d15cec61feeb96fec80949e3cb96eb922fe948657422abe8","ssdeep":"","tlshash":"04518121f5456e7f87d28bb13917be03297c0632d041bda9f4fc486d14b6925320be9b","size":3097,"data":"","first_seen":"2026-01-28T19:28:45.683039Z","last_seen":"2026-01-28T20:06:40.105347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec9c9487501287e64f4009d56b838fb2","sha1":"088e08bb11e6f8d6789c3c0b6972fe75d67ae29e","sha256":"7d8e5a1b81ced2146031c7195da4eec017f7dd82f3691ab7526d1435b67a9dd1","sha512":"d1e3d4cb7ae800ebeb0cead7431bf9b4d5ea41b429e4ef8a5c202b0be35c5ed8205e83703c4a236302d872f891234decbd7b1ea77b89aa067ca0e5aaf87b3675","ssdeep":"","tlshash":"0661869ae77638dbb2f900f2697e0d47eb614435d6c8d438c9bda3141cb5893c274a46","size":3338,"data":"","first_seen":"2026-01-28T19:28:45.694834Z","last_seen":"2026-01-28T20:06:40.106938Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/astra-theme-js-js-extra","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"17f3ce0e65ea4e3cca6131305d2a3729","sha1":"5bdb2c8635c57540005baab09427914233bc17fc","sha256":"c50ae648b7920e330b662a27c01d49df803f970321ecb120253b9e064043ce3a","sha512":"727e9c058ef26323b9d64e4914d3f11b5055724bb4b880a74ae68f086325fbb1de7899fded75acc1ddd2b7a70a6e5fd9bf10e4462f62ebc36a7af8e53c791155","ssdeep":"","tlshash":"10f0a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":545,"data":"","first_seen":"2026-01-28T19:28:45.69014Z","last_seen":"2026-05-06T13:45:49.051284Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-08-11T05:32:38.07825Z","times_seen":217982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc652293888c3dbd38694738dc45eed3","sha1":"71dc866968193f69f2dea5f94758e55b13618bea","sha256":"f4609d656183093abe5ab59d18c307933815fa939a80f7e0015e62f2cf556d60","sha512":"bbe8c5b11c8503f3ea33d4e9d58e930a2710fed26b73d12e714c0268321b7c354d8880dc7c57ab84e380fd658ac05dc91797174348f4c91365e4527daa15fd84","ssdeep":"1536:SWxmDu+HrrUl53yQ5RSSYeAjA6c9CSToS2lC83FiOYn9G4cR8+KLiA2gf6XSkCfR:12GE2SsAu","tlshash":"4c83f8953192f8b607fb40db903b4006f26609b8b41da094bbfddce19975d8a133bb79","size":87335,"data":"","first_seen":"2026-01-20T09:57:08.409946Z","last_seen":"2026-08-10T05:01:25.27105Z","times_seen":4707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-11T05:38:08.390913Z","times_seen":340883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.34.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d3a5f7cb0809cede1c16e13d27ceba5","sha1":"381597908f8cf6f35b05e0d646c3e1c16779de81","sha256":"c33acfeb0b2e31664b9964092e512495dfabbc729fce2eee12c38ac42459f8b3","sha512":"2b38bc1a2bfcf12f0253e90b9e72fcdc3f836124225e8d3cdd773764226fbb3bcf502a96c3d96a0eebd24120f0cc8066b273c1ab06a00356aa278f6154dbb663","ssdeep":"96:BNfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:3VNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"1dd154980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","size":6249,"data":"","first_seen":"2026-01-21T13:53:51.770306Z","last_seen":"2026-08-10T21:18:53.170462Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-i18n-js-after","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0ce7a0614de58e2e8b423b916887263","sha1":"f827ce2dd7ff58400c05ada3bf5ff366749f623d","sha256":"b599e7f75289b9678503334375ca9b5cbb4ea82f5007f1feb5ebe312579c986b","sha512":"a34816409ec17de2663764bee7096f6a75434112c2df4fb3efb453496c192fa1e1676a0f57329a21147166047e4175b60c7c7b81bdc44538563e3d15b9ff4292","ssdeep":"","tlshash":"84f012cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":438,"data":"","first_seen":"2025-12-06T12:59:59.464501Z","last_seen":"2026-08-08T21:50:04.653188Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-11T05:35:44.184915Z","times_seen":204031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/2026/01/Screenshot-2026-01-24-at-20.21.01-1024x181.png","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Screenshot-2026-01-24-at-20.21.01-1024x181.png HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 21350\r\nlast-modified: Sat, 24 Jan 2026 19:21:19 GMT\r\nexpires: Sun, 29 Mar 2026 20:06:14 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":21350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 181, 8-bit/color RGBA, non-interlaced","md5":"f090d24b008e2d5f157854604dc31c39","sha1":"cdb5a77b1eb9bee1195b6c5ef2dd42ec80ea76ea","sha256":"d7dc97dcd729000d45905d3dd802ef2f714f14b0ad0a96519f962522cd627ca6","sha512":"58caaa29c8e8dcedd97d24c72089bddbc2bfeaf561eb69279a87dc51cdb3df5e54c70ead882ff2dd23180975372eaf65afba7e36b63d1c067c7c0247b8335e4c","ssdeep":"384:zMPEh2TqS9TvM+F3El+XJTZ7pL54E7ChubzREY6842QmxaQn+g:IMh2T9TvM+tE+xZFWcb9EN8MmxaQ+g","tlshash":"69a2c0cf6663e7913f2f094968725b00dcf08ac989404c726efad06cd2d72ec64997d6","first_seen":"2026-01-28T19:28:45.674375Z","last_seen":"2026-01-28T20:06:40.026561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/2026/01/apple-touch-icon.png","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/apple-touch-icon.png HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5185\r\nlast-modified: Sat, 24 Jan 2026 09:30:55 GMT\r\nexpires: Sun, 29 Mar 2026 20:06:14 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5185,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"44d7d824f008c54fab15357dc797080c","sha1":"f781df5c19d463e7c4d4fb620371977e263229bc","sha256":"5a469317d9688beeaa8979356d1ba5e8a59f1949d09cc924835453586a845eee","sha512":"8cc7ba2d85e4429a661a2a4ef6852d59eeee59252003c87a345f1595fc4091116f9ccbb5219e0474cc39a2e5265582d51f5847486f6a2171efe27892ab80ca6b","ssdeep":"96:BDFf6bwWJyA/1YCROt55StMKsZACHdnlOuJSWl2i:VJtWJyAtlRA55StxsCCjO5C","tlshash":"1eb18dc7e72edff195a3ec52635808cbb5418f1239958ec6b90026690221d1dd262688","first_seen":"2025-06-28T18:32:25.969882Z","last_seen":"2026-02-01T04:00:58.346833Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/2026/01/Screenshot-2026-01-24-at-20.10.01-1024x291.png","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Screenshot-2026-01-24-at-20.10.01-1024x291.png HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 57543\r\nlast-modified: Sat, 24 Jan 2026 19:10:29 GMT\r\nexpires: Sun, 29 Mar 2026 20:06:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":57543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 291, 8-bit/color RGBA, non-interlaced","md5":"bd5d7530db83bd69e454d05c8924a4c3","sha1":"656904cea3881ae4f61cae2254105bcec26baead","sha256":"379d2a16193e375115f0da055cec399394e5d2d12835f5433730a6c133d69306","sha512":"42e492cf4a8edc866a3868493a73d9f98e46f500a5a4743daa2a70e8d39cf6476d768f5057332084f0417b83741db72670ed9669e3ee812ebc63395bd3098ffb","ssdeep":"768:T50iZKbc8GqOZpwYJKPaXCWeLNAbeNN9bSf+fqPnQGEx7XdHYKbs8burnSUbG0pD:FD8c8eZuSKPu1eRA0qQrLqeUbG0pWH8","tlshash":"9a43f28a3936d5474e2b1df6e114cf53b4bf12985ded0be1e704f99dae84e24a0ec04a","first_seen":"2026-01-28T19:28:45.676666Z","last_seen":"2026-01-28T20:06:40.034492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fassets-oraclehosts-daemon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 15:23:47 GMT\r\nexpires: Sun, 24 Jan 2027 15:23:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 362547\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-11T05:55:34.577982Z","times_seen":256385,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":71,"dns":2,"connect":7,"send":0,"wait":10,"receive":10,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.34.2 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:34:21 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":54511,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54511), with no line terminators","md5":"56191e9cf78477719ca66780e8d3cbfd","sha1":"8473aed27502d32928dcad273a9ce446238a6502","sha256":"2c5e4ed6659c6383d6a27d079848670d4d6cc6f6ee27d8021d2eab2bb8a0038a","sha512":"107c9b1b9f52cb4ce29752e541f76dfd3c97083960da1997921e4fcbac33900a547aac2631733069765809d004a565fa23282734a08736a028b81a1f05d1c44a","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQikvmGkvmCFldtraiIks05ArOk:dFLh5mP3RwlDdps05Xk","tlshash":"9a330da23d13b269226f442b82c7364c536495c1ee1375d9f944c5239afece63b36c2b","first_seen":"2026-01-20T09:57:08.400248Z","last_seen":"2026-08-10T05:01:25.306613Z","times_seen":5090,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:28:44 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":15525,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15525), with no line terminators","md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-08-11T05:32:36.542103Z","times_seen":17780,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.34.2 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:34:21 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":87335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"cc652293888c3dbd38694738dc45eed3","sha1":"71dc866968193f69f2dea5f94758e55b13618bea","sha256":"f4609d656183093abe5ab59d18c307933815fa939a80f7e0015e62f2cf556d60","sha512":"bbe8c5b11c8503f3ea33d4e9d58e930a2710fed26b73d12e714c0268321b7c354d8880dc7c57ab84e380fd658ac05dc91797174348f4c91365e4527daa15fd84","ssdeep":"1536:SWxmDu+HrrUl53yQ5RSSYeAjA6c9CSToS2lC83FiOYn9G4cR8+KLiA2gf6XSkCfR:12GE2SsAu","tlshash":"4c83f8953192f8b607fb40db903b4006f26609b8b41da094bbfddce19975d8a133bb79","first_seen":"2026-01-20T09:57:08.409946Z","last_seen":"2026-08-10T05:01:25.27105Z","times_seen":4707,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 07 Nov 2025 12:44:34 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:14 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T05:35:44.128993Z","times_seen":310852,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/2026/01/apple-touch-icon-150x150.png","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/apple-touch-icon-150x150.png HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5086\r\nlast-modified: Sat, 24 Jan 2026 21:00:54 GMT\r\nexpires: Sun, 29 Mar 2026 20:06:14 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"01bcaa2c3c753b63278ebedf18944e46","sha1":"71d3cdadd0808cd374a4834c9cfc65ef4b172bc3","sha256":"6f0a69f87e9fe9c72876f95f9bebfdc4f35a66d6911da95ab921e7457215dc9d","sha512":"8c982ca1e9e4ebf15883935170c6cdb6f82228d8e205eaa79f85fb7c651356dfcd27f924b9608b81768501cd061a9127cab1d34d287de2e783c96268afcc25c9","ssdeep":"96:0fz+xE2abWSRSvS0E6keIxPCMcCJd0k11gZIVNB813zh0wXfEdCObV1:2yxEpWOSv8OcZL12IvBGzh0kM3j","tlshash":"bea18f939c0d21e499c00197e5a1c4b1f5a790d31fc7853bd530ad7a793707ba7c4231","first_seen":"2026-01-28T19:28:45.679539Z","last_seen":"2026-01-28T20:06:40.056415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/2026/01/Screenshot-2026-01-24-at-21.03.32.png","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Screenshot-2026-01-24-at-21.03.32.png HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 22853\r\nlast-modified: Sat, 24 Jan 2026 20:06:29 GMT\r\nexpires: Sun, 29 Mar 2026 20:06:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 264 x 106, 8-bit/color RGBA, non-interlaced","md5":"4eaea33354604c765178a6ec70a8e64a","sha1":"c290b91db6a8e0fc85894c69f504dec846594d01","sha256":"a062b8eebb9d5d5fe837f8ac85c56a796ed6414349cb17f8f5b27e7e343aff46","sha512":"9767a369fbe63e37d1fe199bc0f3a9c4722dc89f597972e39921fec1448e108b0e7dc5b2bf4a4a1b94f9d9280894e64be402990ac225ccba4c45fec041f70b4e","ssdeep":"384:UMntzR7tqL8j5xX/SawzBiVpwiKVfPTkuIBGYgtRKzgeH5yN8alS+vYiA3n7:UMnTtqq5xX/ISwiKVfYu6OXKUeH501la","tlshash":"44a2d0f23fd8a13068798c244cb1632514eed7d1504d70963769ef7ae3461460e8f6ee","first_seen":"2026-01-28T19:28:45.663832Z","last_seen":"2026-01-28T20:06:40.062748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:28:44 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":25965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25965), with no line terminators","md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-08-11T05:32:36.534913Z","times_seen":21146,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fassets-oraclehosts-daemon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:18:09 GMT\r\nexpires: Sat, 23 Jan 2027 13:18:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nage: 456485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-08-11T01:36:40.650911Z","times_seen":3024,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":129,"dns":0,"connect":21,"send":0,"wait":8,"receive":2,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.12.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.12.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:28:44 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":45749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43567)","md5":"42496634dc1c555e846841a0080ada59","sha1":"9e2de8d81b0caa2745f374746c60a223c1ba27d7","sha256":"a8ff2f0b3249b1dbadfe779835a4b29346af2941144d12d2f95c2a6e505f4088","sha512":"68529399c5c478f9d4a9ce838ee0bc39e4a36e0f89e88633e4840795957f3146da15d8b6bc81e308f464dffb6bfe080bc42797fd4c3939f05259a99a562dbf8f","ssdeep":"768:mPcOrP1rhDYollnk+FHk3YCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:AnYY+tHQtBU5PTwDuaP","tlshash":"6823f96043d035391233873efad6b9082b694313d74f26e6f8ab8668c9c57d71a72e4c","first_seen":"2026-01-21T20:47:01.725402Z","last_seen":"2026-08-10T10:40:55.67133Z","times_seen":6414,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 21 Oct 2025 04:14:02 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-11T05:35:44.184915Z","times_seen":204031,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T20:06:12.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.8\r\nlink: \u003chttps://fassets-oraclehosts-daemon.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://fassets-oraclehosts-daemon.com/wp-json/wp/v2/pages/26\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://fassets-oraclehosts-daemon.com/\u003e; rel=shortlink\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Elementor:3.34.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.8","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":116280,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (57073)","md5":"28e46d5cef0ce2cf82c85d2d3b75fbdb","sha1":"b2fa68f27bafeecc64b1c7cb6fe9100721d2b143","sha256":"899ac022796ed57dfcf6c4e8290485fa0e5d14d0cdeb8b160968179c7ec9cf1b","sha512":"c8da6585c566bf36d504db8dc32e062d01e02993611ed5fd5764f9b4608444dcfa73ec25e9af509cabb09826428d1e1ab453e4ff8a0403ef5dde55ccae056fd2","ssdeep":"1536:sMnAlnXp5+j+4HfiJiTC0ypcs4AslbogJSrq7h9QMGnoc2fBF:szdms4ZlbogJSgh9QMGocSF","tlshash":"94b3d76077a0157a263b43bde55bf60c65284623d60ea7e5f4fdc09c85d9fa320b270e","first_seen":"2026-01-28T19:28:45.671946Z","last_seen":"2026-01-28T20:06:40.079538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2088,"timings":{"blocked":174,"dns":1,"connect":54,"send":0,"wait":1740,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 28 Jan 2026 20:06:14 GMT\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-08-11T04:57:21.347965Z","times_seen":21452,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":171,"dns":0,"connect":10,"send":0,"wait":25,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.34.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.34.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:33:33 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6249,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204), with CRLF line terminators","md5":"4d3a5f7cb0809cede1c16e13d27ceba5","sha1":"381597908f8cf6f35b05e0d646c3e1c16779de81","sha256":"c33acfeb0b2e31664b9964092e512495dfabbc729fce2eee12c38ac42459f8b3","sha512":"2b38bc1a2bfcf12f0253e90b9e72fcdc3f836124225e8d3cdd773764226fbb3bcf502a96c3d96a0eebd24120f0cc8066b273c1ab06a00356aa278f6154dbb663","ssdeep":"96:BNfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:3VNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"1dd154980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","first_seen":"2026-01-21T13:53:51.770306Z","last_seen":"2026-08-10T21:18:53.170462Z","times_seen":144,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:34:21 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:14 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-11T05:41:51.473987Z","times_seen":150625,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/elementor/css/post-25.css?ver=1769335954","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-25.css?ver=1769335954 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 10:12:34 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1231), with no line terminators","md5":"11f4116e2a45f09a88e5c29e2363f6b4","sha1":"81567cd9f1fd088381ee23c4d433bd947a070d66","sha256":"6f0717aec2e83ebd0c151f27a2005ca422586389138ed028e0961498330ed04e","sha512":"ef93b08871578a9030d6e94098db53909aaed1ff318c788526372a97c0459cf04c44644281242e43b7612dc6d6dadc82fa630fbf9e8b47df6aee64676e7e3a46","ssdeep":"","tlshash":"492124457a23d432e07b092f91d3b02c102cd46fa25f8adff41d9649f9bea4a2228643","first_seen":"2025-10-03T01:03:53.030793Z","last_seen":"2026-07-20T09:17:28.988655Z","times_seen":9,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T05:56:20.447278Z","times_seen":1014021,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 21 Oct 2025 04:14:02 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-11T05:35:44.11769Z","times_seen":200970,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.34.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.34.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:33:33 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44259,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44214), with CRLF line terminators","md5":"75335041fd6f5d627ddc3475811aea8c","sha1":"8c3199226b96d5889bd4398d46ac209eb1d0ddef","sha256":"31b996586b2f1ca12e0aa6f59393364c7ba328449643d621a91fbd742aeccaf3","sha512":"0838bd06fc600eee50bf09a3bac2cc4815aab592ef0a913e4a2d83d7b3dd27bfad8591ee0113895609e49074562ad54a2b30708150c9b1551e88a60d32f1b1e2","ssdeep":"768:3/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7La:ftDD1+WE9A5yLcWJ9mBtIoERuWfRMBK7","tlshash":"9413955171aaca2941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","first_seen":"2026-01-21T13:53:51.822148Z","last_seen":"2026-08-10T21:18:53.209793Z","times_seen":144,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter%3A400%2C600%7CPlus+Jakarta+Sans%3A600\u0026display=fallback\u0026ver=4.12.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Inter%3A400%2C600%7CPlus+Jakarta+Sans%3A600\u0026display=fallback\u0026ver=4.12.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 28 Jan 2026 20:06:14 GMT\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6866,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a4e35de8adaab1bcda1108fc0efabeb","sha1":"dd7eb9f7567ed2db483b06872ebe7a6f699179d6","sha256":"41cbc15c1d7e6ff94a392dc82f2a11fb931c96af6dfadcf5353d69b7e0324254","sha512":"762192c1edc63e5aab42248f7e153319bf1cfaa213557f03c4967a5430649412d385f06099037550c1cbb44a2cf6f9a25603dd95352e6454ffc577fc9d33b528","ssdeep":"96:aOEPNqOEPXFZHOEPmOEPO3vOEPBOEPBJc+uTOEPNcNDOxMPNqOxMPXFZHOxMPmOF:ANwFUO3VTxuwNGXqO3nBxYdwO8+lg","tlshash":"67e1fc82042ba400ab931dc763cf7f36bece50856089d1a95ffd0d899ceac7a1364b5d","first_seen":"2025-09-13T03:25:06.224931Z","last_seen":"2026-08-09T19:35:20.743373Z","times_seen":994,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":87,"dns":0,"connect":7,"send":0,"wait":17,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.34.2 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 214\r\nlast-modified: Sat, 24 Jan 2026 09:34:21 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-08-11T05:41:51.463679Z","times_seen":118758,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/elementor/css/post-26.css?ver=1769335954","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-26.css?ver=1769335954 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 10:12:34 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":6920,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6920), with no line terminators","md5":"c488ac049f238e6bcba1a70071b6916a","sha1":"9edb5efe1d07904ea3ce2e468121b818f6af6ee7","sha256":"8a371b5e97b9710f5743b8bf904c708c086339af253bcdfda8778a3053c0b4c1","sha512":"ba77b1d41810d047397a94d1902842827c6a51fc60be12e2e19ca5c9ec7963edc2a8eb0a540e6d1761efe65f5470e581525336bc650bbc62fe0c0b1f560b42fc","ssdeep":"96:kUTD6It0yPP6l8NKgqCxgd2KnJg2KnJCX2KnJTpz:k46It0FERqCg2uJg2uJy2uJZ","tlshash":"9ae18b923d13d32eb67f105f1503655c2418ccceeabaaecafd501217f4bad9637a0668","first_seen":"2026-01-28T19:28:45.675802Z","last_seen":"2026-01-28T20:06:40.09449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 28 Jan 2026 20:06:14 GMT\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c1a689e52451e6a409deb9d792dbac30","sha1":"d51f6f8ea1dfdf5fb4c0dcaf3c7978ce4d8eed75","sha256":"55960525d6ce04943c6bde176b9ab7c92f4a27666c7105e5b0d32a336ab1c0b2","sha512":"5839e22aaa92cf2407b1717f337de537822b89e5745d60a1db18ba779cbe19fbdc4266d89a73adba84f7005bc176eaa0d9294903992cf04e1be63072b6f7e675","ssdeep":"768:yDcDaDvDcDzBDFKDeDODO/Re/zUFhl114KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQS:zO3YRSrslIxerANy3El","tlshash":"efa3eda1041b5040ab834ce223cfbe34fe1f92507151d0b9abfd9b6baddbd66526835c","first_seen":"2025-11-19T00:01:22.142754Z","last_seen":"2026-05-31T09:48:00.748269Z","times_seen":5838,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":169,"dns":0,"connect":9,"send":0,"wait":29,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T05:56:20.389287Z","times_seen":928954,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/uploads/2026/01/Screenshot-2026-01-24-at-20.16.25-1024x410.png","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Screenshot-2026-01-24-at-20.16.25-1024x410.png HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 49289\r\nlast-modified: Sat, 24 Jan 2026 19:16:53 GMT\r\nexpires: Sun, 29 Mar 2026 20:06:13 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":49289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 410, 8-bit/color RGBA, non-interlaced","md5":"5150d577f87d84be23f563651eb4b29c","sha1":"63e6b1d53cd815b24efe557b1ea922303bba9230","sha256":"f83c8f4798df20ed132cdfa33c61833a2445828758808c0f3017114bdac00df4","sha512":"6f193e5cf5756cf1ff63d920a7ce9fd373914d03d73a62adce767e11d4261cbc9e37685f7bf5fa5bb6ce71d570dbf235b97ac6903a57aceddad15e7592c55af4","ssdeep":"1536:qjnIjb3qKpdCYklZpfAUT8C7iiGtq6bVB1NYdA:qrirTdIldoCufq6padA","tlshash":"5d23e1460ba9ef4bdd24683b40f28b60fdf756b781d95aa1a14ce71d5d03e182b32e1c","first_seen":"2026-01-28T19:28:45.662002Z","last_seen":"2026-01-28T20:06:40.096921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 06 Feb 2025 15:27:26 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-11T05:38:08.390913Z","times_seen":340883,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.34.2 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:34:21 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-08-11T04:45:32.932973Z","times_seen":70844,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.34.2 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:34:21 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-08-11T05:50:12.970646Z","times_seen":54034,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Instrument+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Instrument+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 28 Jan 2026 20:06:14 GMT\r\ndate: Wed, 28 Jan 2026 20:06:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7748,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3124f2f5110271e3cc4d72b07123257c","sha1":"a30cefe615a028e65696ebe56248a085e0515f2d","sha256":"8abb5adcb98375e2ae9810f7d095e14b7ddc33f8653a7b27e243de329d78ada8","sha512":"8da79b7a9ccc5e05c5858b89d3b4bf183651d24a131d8e795cff710e84e2bfb4335ccdd33a5fde88a2450e97ab27b0450fd9d4d1b5f7b4ce10e5eeb568942606","ssdeep":"192:iiyziWZyzZWkyzkWTyzTy/lk/+Z/vi/wK:iNlSUrDQ3","tlshash":"a7f1dba1046fa6549f839dc123ee7e32ee1ea1607400d8259bfe2498fc9ed79437674c","first_seen":"2025-09-09T07:17:48.387315Z","last_seen":"2026-08-10T21:18:53.140549Z","times_seen":261,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":174,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.34.2","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.34.2 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:34:21 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5677), with no line terminators","md5":"8677d8dfcc987f7d42b832b5ec35587d","sha1":"471ad10036d5aac3064d12441eeaffa05340e4b5","sha256":"b4bbbeb410140adf0ad76bf74e2a6525427e7fd867020599bcce5ce6c724646e","sha512":"ff8c780d9d829ce12e12f10f88fa2b4d970416aea6474c0465e184d78d19e2bbe450869004403e5bf958b394834998ac4d7ee037fed8a2425a92b994581997fa","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5p0m4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5WmH0IW9v7G/2","tlshash":"68c152941694fd2b21e139d8e01b9735252ec1373c1af981fa32eced54e4ed183aa532","first_seen":"2025-12-12T23:30:14.897515Z","last_seen":"2026-08-10T05:16:08.348445Z","times_seen":24663,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fassets-oraclehosts-daemon.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.34.1","fqdn":"fassets-oraclehosts-daemon.com","domain":"fassets-oraclehosts-daemon.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fassets-oraclehosts-daemon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 07:26:56 GMT","end":"Sat, 25 Apr 2026 07:26:55 GMT"},"fingerprint":{"sha1":"5A:25:54:B6:ED:C6:31:78:9B:47:8B:DA:26:CD:59:A5:F9:A7:6F:D8","sha256":"8B:D3:BC:DD:6F:79:D0:F4:36:D5:CF:95:7A:59:52:8E:50:60:E4:6B:F7:0E:1A:4C:4F:37:0A:CC:66:FC:61:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.34.1 HTTP/1.1\r\nHost: fassets-oraclehosts-daemon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fassets-oraclehosts-daemon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 20:06:13 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 24 Jan 2026 09:33:33 GMT\r\nexpires: Fri, 27 Feb 2026 20:06:13 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24048,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24003), with CRLF line terminators","md5":"5888f03128a623fb08d9653d68f99419","sha1":"ff37011866a3800c26ada8eaf23e9ceb3f182903","sha256":"03f0b089cb9d247bd10c8efd03e9a3e4ab69dea20e1ee90d370776b18cfbae68","sha512":"ba4e544530365db79df20e327b0a2cbf951e319d8ce8f0e0bfc60b426b1f8b32db43ee7bfb7124df38a583c9bfcf95627dddb10d2932e88c4f17352d1b387c72","ssdeep":"384:1dGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN74:vR+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"60b2d9063163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","first_seen":"2026-01-21T13:53:51.827531Z","last_seen":"2026-08-10T21:18:53.117455Z","times_seen":144,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"fassets-oraclehosts-daemon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fassets-oraclehosts-daemon.com/","date":"2026-01-28T20:06:14.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fassets-oraclehosts-daemon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 18:37:38 GMT\r\nexpires: Sun, 24 Jan 2027 18:37:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 350916\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-11T05:56:20.474325Z","times_seen":961467,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":75,"dns":0,"connect":7,"send":0,"wait":9,"receive":5,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}