{"report_id":"dac876bc-de7f-4d92-a4f5-f8f4c77b1935","version":6,"status":"done","tags":[],"date":"2026-01-05T00:25:48Z","url":{"schema":"http","addr":"bft.dvj.mybluehost.me","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bft.dvj.mybluehost.me/","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"title":"Welcome — kommt bald","dom":{"size":17068,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9750)","md5":"bdf4b55210871f31274ee9e46dd478e5","sha1":"617bf7b32017d251663401715079a17a344cb9ca","sha256":"ce8dda81eb7a1cb0c258f492e56505025150db356984c128a13f1de6b13f1c48","sha512":"42ebb166ed445f21fbbe6c6d314bac752dbb3b3f19f5bf0706b71b4ead93b6806e1cba66a47834fdc33b725eba0e4dc9eb363c0c1f7b48c51926777e870ef988","ssdeep":"384:Nzz5quCp2InGxmWGx4COcq2434IlGxKK3w39M3dJg:l5nE2kGJGOcq2pCGz7w","tlshash":"947284769648976c0843c998cf33e1a4130f40faf69ec694b5efc375ba97ac4e547828","dom_hash":"domhash172b103d33a9bc6005b2977aed842614","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bft.dvj.mybluehost.me","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T00:25:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"bft.dvj.mybluehost.me","ip":{"addr":"185.195.12.158","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"domain_registered":"2016-10-05","domain_rank":0,"first_seen":"2026-01-05T00:25:48.437918Z","last_seen":"2026-01-05T00:25:48.437919Z","alert_count":10,"request_count":5,"received_data":312137,"sent_data":2706,"comment":"","tags":null,"fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bft.dvj.mybluehost.me/wp-includes/js/jquery/jquery.js","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16623e9f7cd802cf093c325c511a739c","sha1":"b364dbd40e67076a03e9d7b061c9b2624d081e31","sha256":"1e7f83052e1e3442c4397ced9555033cd1d3f08444d85960683bcf91c8433cdb","sha512":"44b9d0ed3184fe5f19e650798e6fda22b71a6f316415e08c4ec88af3a4211e9fd335d5f9fc44a070f7b478d7060ae3b665c2d2620bbbce2ea6098bd6826b930c","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPf2:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAk","tlshash":"8f54a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285334,"data":"","first_seen":"2023-09-10T20:41:57Z","last_seen":"2026-06-17T07:28:35.962561Z","times_seen":9242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bft.dvj.mybluehost.me/","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T00:25:26.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.bft.dvj.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 08:30:43 GMT","end":"Sun, 22 Mar 2026 08:30:42 GMT"},"fingerprint":{"sha1":"B8:BB:52:1A:F7:30:04:CF:F1:7D:48:32:42:D5:7F:D2:EB:C3:27:52","sha256":"81:F1:3B:6A:D1:0E:1C:AE:EB:F4:02:D5:AF:6E:6E:B7:6A:8C:11:A5:E9:89:73:53:B3:CB:CF:09:09:F8:D6:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bft.dvj.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 00:25:26 GMT\r\nserver: nginx/1.27.4\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7455\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\ncache-control: no-store, no-cache, must-revalidate, max-age=7200\r\nexpires: Mon, 05 Jan 2026 02:25:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nset-cookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602; path=/; Max-Age=86400; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":17056,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9705)","md5":"f8efc5fc7362e47d39296adebfcb37ab","sha1":"dcd8bae17434379f4a67e2d3fd4785ddf8647945","sha256":"c4de7737df124e7a503c1f4fa039ef8b833a8bfb545eec60a39e81e6cfdefcfb","sha512":"dfbe2dd6766b3f4da9979ce2b64f8e321a95159f9e668041d9eabbebc8ef0c3a85887b571f7d4aacebd7eed01f5c4c61f9114a82cf5fef31b426138500370801","ssdeep":"384:4zW5q7Cp2nnGx7WGx5CnZY434plGxBKuwl9M3dCg:95qE2nGIGiZYpfGW01","tlshash":"7b72a4769648db6c0843c998cf33e1a4130f50eaf59ec694b5efc375ba97ac4e507828","first_seen":"2026-01-05T00:25:53.479328Z","last_seen":"2026-01-05T00:25:53.479328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":74,"dns":26,"connect":20,"send":0,"wait":97,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bft.dvj.mybluehost.me/wp-includes/js/jquery/jquery.js","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bft.dvj.mybluehost.me/","date":"2026-01-05T00:25:26.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.bft.dvj.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 08:30:43 GMT","end":"Sun, 22 Mar 2026 08:30:42 GMT"},"fingerprint":{"sha1":"B8:BB:52:1A:F7:30:04:CF:F1:7D:48:32:42:D5:7F:D2:EB:C3:27:52","sha256":"81:F1:3B:6A:D1:0E:1C:AE:EB:F4:02:D5:AF:6E:6E:B7:6A:8C:11:A5:E9:89:73:53:B3:CB:CF:09:09:F8:D6:6F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.js HTTP/1.1\r\nHost: bft.dvj.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bft.dvj.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 21 Dec 2025 12:30:37 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Tue, 06 Jan 2026 00:25:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: text/javascript\r\ndate: Mon, 05 Jan 2026 00:25:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":285334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"16623e9f7cd802cf093c325c511a739c","sha1":"b364dbd40e67076a03e9d7b061c9b2624d081e31","sha256":"1e7f83052e1e3442c4397ced9555033cd1d3f08444d85960683bcf91c8433cdb","sha512":"44b9d0ed3184fe5f19e650798e6fda22b71a6f316415e08c4ec88af3a4211e9fd335d5f9fc44a070f7b478d7060ae3b665c2d2620bbbce2ea6098bd6826b930c","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPf2:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAk","tlshash":"8f54a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-10T20:41:57Z","last_seen":"2026-06-17T07:28:35.962561Z","times_seen":9242,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bft.dvj.mybluehost.me/wp-content/plugins/bluehost-wordpress-plugin/assets/styles/coming-soon.css?v=4.11.0","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bft.dvj.mybluehost.me/","date":"2026-01-05T00:25:26.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.bft.dvj.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 08:30:43 GMT","end":"Sun, 22 Mar 2026 08:30:42 GMT"},"fingerprint":{"sha1":"B8:BB:52:1A:F7:30:04:CF:F1:7D:48:32:42:D5:7F:D2:EB:C3:27:52","sha256":"81:F1:3B:6A:D1:0E:1C:AE:EB:F4:02:D5:AF:6E:6E:B7:6A:8C:11:A5:E9:89:73:53:B3:CB:CF:09:09:F8:D6:6F"}}},"request":{"raw":"GET /wp-content/plugins/bluehost-wordpress-plugin/assets/styles/coming-soon.css?v=4.11.0 HTTP/1.1\r\nHost: bft.dvj.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bft.dvj.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 21 Dec 2025 12:31:54 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Tue, 06 Jan 2026 00:25:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 2166\r\ncontent-type: text/css\r\ndate: Mon, 05 Jan 2026 00:25:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":7025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fdace003a0cf34dd8421e0d8d5d5c97b","sha1":"3ba462ed2b02b3fcd79e261dedab3f6ca533379c","sha256":"19a8a0623cda9f77fac389f020045a35514d829999681e6b507af700c95d6948","sha512":"49998f19a0ff9a378a952269b325dd40c7e5fd0987bde6448d7e7accc955d4df63f024f88b3794cb2b32b10ffa181e4b2cef2ac62458d59c070b103f370a6574","ssdeep":"192:xd7C59WXWutfJ0G3XxYXRGv6ZJ+ERXpLd2xzsaqHhH:xd7C5qo8aLdP","tlshash":"07e133226e407946b01f61786ee7db58133e40d3ee0e8e6e7896396d53c43d82937f88","first_seen":"2025-08-08T19:48:28.056166Z","last_seen":"2026-06-16T13:36:28.721818Z","times_seen":717,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bft.dvj.mybluehost.me/wp-content/plugins/bluehost-wordpress-plugin/assets/svg/bluehost-favicon.svg","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bft.dvj.mybluehost.me/","date":"2026-01-05T00:25:26.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.bft.dvj.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 08:30:43 GMT","end":"Sun, 22 Mar 2026 08:30:42 GMT"},"fingerprint":{"sha1":"B8:BB:52:1A:F7:30:04:CF:F1:7D:48:32:42:D5:7F:D2:EB:C3:27:52","sha256":"81:F1:3B:6A:D1:0E:1C:AE:EB:F4:02:D5:AF:6E:6E:B7:6A:8C:11:A5:E9:89:73:53:B3:CB:CF:09:09:F8:D6:6F"}}},"request":{"raw":"GET /wp-content/plugins/bluehost-wordpress-plugin/assets/svg/bluehost-favicon.svg HTTP/1.1\r\nHost: bft.dvj.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bft.dvj.mybluehost.me/wp-content/plugins/bluehost-wordpress-plugin/assets/styles/coming-soon.css?v=4.11.0\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 21 Dec 2025 12:31:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 331\r\ncache-control: max-age=86400\r\nexpires: Tue, 06 Jan 2026 00:25:27 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: image/svg+xml\r\ndate: Mon, 05 Jan 2026 00:25:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"69bcae9e05d7f888ece27cbf075eef09","sha1":"86ed73dd4f29e89dfc1f307e2b32b004de2819bb","sha256":"16be4d05c70a0adaa664fbf388a8737e8e0b922eb3d530c8285e3baa480ede8e","sha512":"e196e0da5e60eab90dd8b35aa32638b05ac5a8e6189d90e5b19bd3ea3b8e81ece40af05b164c8561331a9708a36119df0f6ccf1fccd983f77afa9ca1ba4c0b27","ssdeep":"","tlshash":"a9e04f66c9e800fdcc104edb056ae379199243bd2caa0045327f536017335d4c34a2fe","first_seen":"2025-08-08T19:48:28.057554Z","last_seen":"2026-06-16T13:36:28.727929Z","times_seen":720,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bft.dvj.mybluehost.me/favicon.ico","fqdn":"bft.dvj.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"185.195.12.158","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bft.dvj.mybluehost.me/","date":"2026-01-05T00:25:27.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.bft.dvj.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 08:30:43 GMT","end":"Sun, 22 Mar 2026 08:30:42 GMT"},"fingerprint":{"sha1":"B8:BB:52:1A:F7:30:04:CF:F1:7D:48:32:42:D5:7F:D2:EB:C3:27:52","sha256":"81:F1:3B:6A:D1:0E:1C:AE:EB:F4:02:D5:AF:6E:6E:B7:6A:8C:11:A5:E9:89:73:53:B3:CB:CF:09:09:F8:D6:6F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bft.dvj.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bft.dvj.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 05 Jan 2026 00:25:27 GMT\r\nserver: nginx/1.27.4\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 315\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-17T08:41:57.157777Z","times_seen":145928,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bft.dvj.mybluehost.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}